CloudSolutions Inc, an AWS partner with its aws video

Full Certification Question

CloudSolutions Inc, an AWS partner with its organization org1, needs to access resources in a customer's AWS account within a separate organization org2 to deliver their managed service, requiring a secure, least-privilege approach using APIs or command-line tools. What is the MOST secure way to allow org1 to access resources in org2?