SAP-C02 · Question #632
SAP-C02 Question #632: Real Exam Question with Answer & Explanation
The correct answer is C: Create the OrganizationAccountAccessRole IAM role in each member account. Grant permission. This setup enables centralized management of member accounts from the management account. Administrators in the management account can assume the OrganizationAccountAccessRole in member accounts to perform necessary actions, aligning with AWS best practices for Organizations. It
Question
A large payroll company recently merged with a small staffing company. The unified company now has multiple business units, each with its own existing AWS account. A solutions architect must ensure that the company can centrally manage the billing and access policies for all the AWS accounts. The solutions architect configures AWS Organizations by sending an invitation to all member accounts of the company from a centralized management account. What should the solutions architect do next to meet these requirements?
Options
- ACreate the OrganizationAccountAccess IAM group in each member account. Include the
- BCreate the OrganizationAccountAccessPolicy IAM policy in each member account. Connect the
- CCreate the OrganizationAccountAccessRole IAM role in each member account. Grant permission
- DCreate the OrganizationAccountAccessRole IAM role in the management account. Attach the
Explanation
This setup enables centralized management of member accounts from the management account. Administrators in the management account can assume the OrganizationAccountAccessRole in member accounts to perform necessary actions, aligning with AWS best practices for Organizations. It simplifies the management and auditing of various accounts and ensures a standardized role exists across all accounts for consistent access control.
Community Discussion
No community discussion yet for this question.