Exam AWS-SysOps topic 1 question 899 discussion

Exam question from Amazon's AWS-SysOps

Question #: 899
Topic #: 1

A company has multiple AWS accounts. The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account. Corporate policies state that developers may use only approved AWS services in the production account.
What is the MOST operationally efficient solution to control the production account?

A. Create a customer managed policy in AWS Identity and Access Management (IAM). Apply the policy to all users within the production account.
B. Create a job function policy in AWS Identity and Access Management (IAM). Apply the policy to all users within the production OU.
C. Create a service control policy (SCP). Apply the SCP to the production OU.
D. Create an IAM policy. Apply the policy in Amazon API Gateway to restrict the production account.

Show Suggested Answer

Suggested Answer: A 🗳️

by binhdt2611 at May 7, 2021, 4:21 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

albert_kuo

9 months, 1 week ago

Selected Answer: C

In the given scenario, the corporate policies state that developers may use only approved AWS services in the production account. To enforce this policy effectively, you can create an SCP that restricts the usage of AWS services within the production OU. By applying the SCP to the production OU, you ensure that any user or role within that OU will be subject to the restrictions defined in the SCP.

upvoted 1 times

...

gulu73

1 year, 2 months ago

Selected Answer: C

Answer is C

upvoted 1 times

...

TroyMcLure

2 years, 6 months ago

Correct Answer: C

upvoted 3 times

...

RicardoD

2 years, 6 months ago

C is the answer

upvoted 2 times

...

binhdt2611

2 years, 7 months ago

it should be C