SAP-C02 Question #126: Real Exam Question with Answer & Explanation

Question

A company has deployed an application to multiple environments in AWS, including production and testing. The company has separate accounts for production and testing, and users are allowed to create additional application users for team members or services, as needed. The Security team has asked the Operations team for better isolation between production and testing with centralized controls on security credentials and improved management of permissions between environments. Which of the following options would MOST securely accomplish this goal?

Options

• ACreate a new AWS account to hold user and service accounts, such as an identity account.
• BModify permissions in the production and testing accounts to limit creating new IAM users to
• CCreate a script that runs on each account that checks user accounts for adherence to a security
• DCreate all user accounts in the production account.