<span dir="LTR">Your team owns an AWS account for central management. The AWS accounts from another AWS Organization will send their CloudWatch events to your AWS account’s default CloudWatch event bus. You need to set up your AWS account and grant access to all accounts in that organization so that you can receive the events properly from these AWS accounts. Which of the following actions is required?</span>

Answer options:

A.Create an IAM role in your AWS account that has the permission to send CloudWatch events and allows all accounts in the organization to assume it.
B.In the CloudWatch Event console, attach an IAM policy that allows the organization’s AWS accounts to send events to your default CloudWatch event bus.
C.In the CloudWatch Event console, go to Event Buses -> Add Permission, choose AWS Account and enter the AWS account IDs of the organization.
D.In the CloudWatch Event console, go to Event Buses -> Add Permission, choose Organization and enter the organization ID of that organization.

Correct Answer : D
Option A is incorrect because on the receiver account, you need to edit the permissions on the default CloudWatch event bus instead of a new IAM role.
Option B is incorrect because you cannot directly attach any IAM policy in CloudWatch Event. To add the permissions, you should add other AWS accounts or Organization in the event bus.
Option C is incorrect because since the accounts belong to the same organization, you should add the organization ID in the default event bus.
Option D is CORRECT because with this configuration, you have allowed all accounts in the organization to send events to your default event bus. An example is as follows:
Reference:
https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/CloudWatchEvents-CrossAccountEventDelivery.html