A company manages multiple AWS accounts by using AWS Organizations. Under the root OU. the company has two OUs: Research and DataOps. Because of regulatory requirements, all resources that the company deploys in the organization must reside in the ap-northeast-1 Region. Additionally, EC2 instances that the company deploys in the DataOps OU must use a predefined list of instance types. A solutions architect must implement a solution that applies these restrictions. The solution must maximize operational efficiency and must minimize ongoing maintenance. Which combination of steps will meet these requirements? (Select TWO )

Question

Accepted Answer

C. Create an SCP Use the aws:RequestedRegion condition key to restrict access to all AWS E. Create an SCP Use the ec2:lnstanceType condition key to restrict access to specific instance

Answer

A. Create an IAM role in one account under the DataOps OU.

Answer

B. Create an IAM user in all accounts under the root OU.

Answer

D. Create an SCP Use the ec2 Region condition key to restrict access to all AWS Regions except

A company manages multiple AWS accounts by using AWS Organizations. Under the root OU. the company has two OUs: Research and DataOps. Because of regulatory requirements, all resources that the company

Question

Options

How the community answered

Explanation

Community Discussion