A large company with hundreds of AWS accounts has a newly established centralized internal process for purchasing new or modifying existing Reserved Instances. This process requires all business units that want to purchase or modify Reserved Instances to submit requests to a dedicated team for procurement or execution. Previously, business units would directly purchase or modify Reserved Instances in their own respective AWS accounts autonomously. Which combination of steps should be taken to proactively enforce the new process in the MOST secure way possible? (Choose two.)

Question

Accepted Answer

A. Ensure all AWS accounts are part of an AWS Organizations structure operating in all features D. Create an SCP that contains a deny rule to the ec2:PurchaseReservedlnstancesOffering and

Answer

B. Use AWS Contig lo report on the attachment of an IAM policy that denies access to the

Answer

C. In each AWS account, create an IAM policy with a DENY rule to the

Answer

E. Ensure that all AWS accounts are part of an AWS Organizations structure operating in

A large company with hundreds of AWS accounts has a newly established centralized internal process for purchasing new or modifying existing Reserved Instances. This process requires all business…

Question

Options

How the community answered

Explanation

Community Discussion