A company has separate AWS accounts for its finance, data analytics, and development departments. Because of costs and security concerns, the company wants to control which services each AWS account c

Question

Options

• AUse AWS Systems Manager templates to control which AWS services each department can use
• BCreate organization units (OUs) for each department in AWS Organizations. Attach service
• CUse AWS CloudFormation to automatically provision only the AWS services that each department
• DSet up a list of products in AWS Service Catalog in the AWS accounts to manage and control the

• A
  1% (1)
• B
  89% (63)
• C
  7% (5)
• D
  3% (2)

Explanation

AWS Organizations: AWS Organizations allows you to create multiple AWS accounts and manage them centrally. You can organize accounts into organizational units (OUs) and apply policies to these units. Organizational Units (OUs): Create separate OUs for each department: finance, data analytics, and development. Place the respective AWS accounts for each department into their corresponding OUs. Service Control Policies (SCPs): SCPs are policies that can restrict which AWS services and actions are available to accounts in an OU. Create SCPs to define which services each department can use and attach these policies to the appropriate OUs. SCPs apply to all IAM users, groups, and roles within the accounts in the OU, providing centralized control over service usage. Operational Efficiency: Using AWS Organizations and SCPs provides a scalable and centralized way to manage permissions across multiple accounts with minimal operational overhead.

No community discussion yet for this question.