DOP-C02 Question #429: Real Exam Question with Answer & Explanation

Question

A company uses an organization in AWS Organizations to manage multiple AWS accounts. The company's internal auditors have administrative access to a single audit account within the organization. A DevOps engineer needs to provide a solution to give the auditors read-only access to all accounts within the organization, including new accounts created in the future. Which solution will meet these requirements?

Options

• AEnable AWS IAM Identity Center for the organization. Create a read-only access permission set.
• BCreate an AWS CloudFormation stack set to deploy an IAM role that trusts the audit account and
• CCreate an SCP that provides read-only access for users in the audit account. Apply the policy to
• DEnable AWS Config in the organization management account. Create an AWS managed rule to