SAP-C02 · Question #313
SAP-C02 Question #313: Real Exam Question with Answer & Explanation
The correct answer is A: Create an SCP with the Deny effect on the ec2:PurchaseReservedInstancesOffering action.. SCPs don't affect users or roles in the management (master) account. They affect only the member accounts in your organization. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html
Question
A company decided to purchase Amazon EC2 Reserved Instances. A solutions architect is tasked with implementing a solution where only the master account in AWS Organizations is able to purchase the Reserved Instances. Current and future member accounts should be blocked from purchasing Reserved Instances. Which solution will meet these requirements?
Options
- ACreate an SCP with the Deny effect on the ec2:PurchaseReservedInstancesOffering action.
- BCreate a new organizational unit (OU) Move all current member accounts to the new OU.
- CCreate an AWS Config rule event that triggers automation that will terminate any Reserved
- DCreate two new organizational units (OUs): OU1 and OU2.
Explanation
SCPs don't affect users or roles in the management (master) account. They affect only the member accounts in your organization. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html
Community Discussion
No community discussion yet for this question.