AWS, Security, Architecture, Authentication, Authorization.
API Gateway or SNS topic. Whoever has permission to assume role C can get a set of temporary IAM security credentials that can be used for authentication and authorization to communicate with service C, whether to execute a REST API call or publish a message to an SNS topic. Assuming a role