ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam
Go to Exam

Exam AWS-SysOps topic 1 question 848 discussion

Exam question from Amazon's AWS-SysOps
Question #: 848
Topic #: 1
[All AWS-SysOps Questions]

A company has an AWS account for each department and wants to consolidate billing and reduce overhead. The company wants to make sure that the finance team is denied from accessing services other than Amazon EC2, the security team is denied from accessing services other than AWS CloudTrail, and IT can access any resource.
Which solution meets these requirements with the LEAST amount of operational overhead?

  • A. Create a role for each department within AWS IAM and assign each role the necessary permissions.
  • B. Create a user for each department within AWS IAM and assign each user the necessary permissions.
  • C. Implement service control policies within AWS Organizations to determine which resources each department can access.
  • D. Place each department into an organizational unit (OU) within AWS Organizations and use IAM policies to determine which resources they can access.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by orebaron at Aug. 31, 2020, 11:15 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
orebaron
Highly Voted 7 months ago
C.AWS Organizations is correct
upvoted 6 times
...
RicardoD
Most Recent 5 months, 4 weeks ago
C is the answer
upvoted 1 times
...
abhishek_m_86
6 months, 1 week ago
C. Implement service control policies within AWS Organizations to determine which resources each department can access. Seem correct
upvoted 2 times
...
arpana_03
6 months, 2 weeks ago
C is correct answer
upvoted 1 times
...
jackdryan
6 months, 3 weeks ago
I'll go with C
upvoted 1 times
...
Newguru2020
7 months ago
Ans: C Service control policies enable you to restrict access for team in a given OU
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago