Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 273 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02

Question #: 273
Topic #: 1

[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company is using AWS Organizations to manage multiple accounts. Due to regulatory requirements, the company wants to restrict specific member accounts to certain AWS Regions, where they are permitted to deploy resources. The resources in the accounts must be tagged, enforced based on a group standard, and centrally managed with minimal configuration.

What should a solutions architect do to meet these requirements?

A. Create an AWS Config rule in the specific member accounts to limit Regions and apply a tag policy.
B. From the AWS Billing and Cost Management console, in the management account, disable Regions for the specific member accounts and apply a tag policy on the root.
C. Associate the specific member accounts with the root. Apply a tag policy and an SCP using conditions to limit Regions.
D. Associate the specific member accounts with a new OU. Apply a tag policy and an SCP using conditions to limit Regions.

Show Suggested Answer

Suggested Answer: D 🗳️

by psyx21 at June 21, 2023, 11:29 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.