Amazon
SAA-C03 · Question #740
A global company operates in multiple AWS Regions to meet data residency requirements. The company uses AWS Organizations to manage its accounts. The company wants to restrict IAM roles and access to
Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #740. The question stem and answer options stay visible for context.
Submitted by hassan_iq· Mar 4, 2026Design Secure Architectures
Question
A global company operates in multiple AWS Regions to meet data residency requirements. The company uses AWS Organizations to manage its accounts. The company wants to restrict IAM roles and access to specific Regions to prevent accidental data operations across geographic boundaries. Which solution will meet these requirements?
Options
- AConfigure a service control policy (SCP) to deny the ec2:RunInstances action in non-compliant
- BConfigure IAM policies by using the aws:RequestedRegion condition.
- CConfigure IAM role trust policies that use the aws:SourceIp condition.
- DConfigure AWS Config to detect unwanted access across Regions.
Unlock SAA-C03 to see the answer
You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.