SAP-C02 · Question #348
A company is using AWS Organizations lo manage multiple accounts. Due to regulatory requirements, the company wants to restrict specific member accounts to certain AWS Regions, where they are…
The correct answer is D. Associate the specific member accounts with a new OU. Apply a tag policy and an SCP using. Agreed putting those member accounts with OU then use tagging policy and SCP based conditions to achieve required compliance. https://aws.amazon.com/es/blogs/mt/implement-aws-resource-tagging-strategy-using-aws-tag- policies-and-service-control-policies-scps/
Question
A company is using AWS Organizations lo manage multiple accounts. Due to regulatory requirements, the company wants to restrict specific member accounts to certain AWS Regions, where they are permitted to deploy resources. The resources in the accounts must be tagged, enforced based on a group standard, and centrally managed with minimal configuration. What should a solutions architect do to meet these requirements?
Options
- ACreate an AWS Config rule in the specific member accounts to limit Regions and apply a tag
- BFrom the AWS Billing and Cost Management console, in the master account, disable Regions for
- CAssociate the specific member accounts with the root. Apply a tag policy and an SCP using
- DAssociate the specific member accounts with a new OU. Apply a tag policy and an SCP using
How the community answered
(21 responses)- A29% (6)
- B5% (1)
- C14% (3)
- D52% (11)
Explanation
Agreed putting those member accounts with OU then use tagging policy and SCP based conditions to achieve required compliance. https://aws.amazon.com/es/blogs/mt/implement-aws-resource-tagging-strategy-using-aws-tag- policies-and-service-control-policies-scps/
Community Discussion
No community discussion yet for this question.