Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 386 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02

Question #: 386
Topic #: 1

[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

An enterprise company is building an infrastructure services platform for its users. The company has the following requirements:

• Provide least privilege access to users when launching AWS infrastructure so users cannot provision unapproved services.
• Use a central account to manage the creation of infrastructure services.
• Provide the ability to distribute infrastructure services to multiple accounts in AWS Organizations.
• Provide the ability to enforce tags on any infrastructure that is started by users.

Which combination of actions using AWS services will meet these requirements? (Choose three.)

A. Develop infrastructure services using AWS CloudFormation templates. Add the templates to a central Amazon S3 bucket and add the IAM roles or users that require access to the S3 bucket policy.
B. Develop infrastructure services using AWS CloudFormation templates. Upload each template as an AWS Service Catalog product to portfolios created in a central AWS account. Share these portfolios with the Organizations structure created for the company.
C. Allow user IAM roles to have AWSCloudFormationFullAccess and AmazonS3ReadOnlyAccess permissions. Add an Organizations SCP at the AWS account root user level to deny all services except AWS CloudFormation and Amazon S3.
D. Allow user IAM roles to have ServiceCatalogEndUserAccess permissions only. Use an automation script to import the central portfolios to local AWS accounts, copy the TagOption, assign users access, and apply launch constraints.
E. Use the AWS Service Catalog TagOption Library to maintain a list of tags required by the company. Apply the TagOption to AWS Service Catalog products or portfolios.
F. Use the AWS CloudFormation Resource Tags property to enforce the application of tags to any CloudFormation templates that will be created for users.

Show Suggested Answer

Suggested Answer: BDE 🗳️

by devalenzuela86 at Nov. 22, 2023, 6:35 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

salazar35

Highly Voted 1 year, 7 months ago

Selected Answer: BDE

BDE - refer Service Catalog

upvoted 7 times

...

AzureDP900

Most Recent 7 months, 2 weeks ago

BDE are right options

upvoted 1 times

...

nimbus_00

7 months, 3 weeks ago

Selected Answer: BDE

https://aws.amazon.com/blogs/mt/simplify-sharing-your-aws-service-catalog-portfolios-in-an-aws-organizations-setup/

upvoted 1 times

...

kgpoj

10 months, 2 weeks ago

Selected Answer: BDE

Love this kinda question. Basically, there is no spaghetti between choices. If you know Service Catalogue is the choice, then you can immediately choose all 3 correct answers without hesitation

upvoted 2 times

...

a54b16f

1 year, 3 months ago

Selected Answer: BDE

Approved == Service Catalog

upvoted 1 times

...

career360guru

1 year, 5 months ago

Selected Answer: BDE

Option B, D, E

upvoted 1 times

...

vibzr2023

1 year, 5 months ago

Answer: B B. Develop infrastructure using CloudFormation and AWS Service Catalog D. Use Service Catalog EndUserAccess and automation E. Use Service Catalog TagOption Library and apply to products/portfolios:

upvoted 3 times