SAP-C02 · Question #727
A company uses AWS Organizations to manage its AWS accounts. A solutions architect must design a solution in which only administrator roles are allowed to use IAM actions. However, the solutions archi
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #727. The question stem and answer options stay visible for context.
Question
A company uses AWS Organizations to manage its AWS accounts. A solutions architect must design a solution in which only administrator roles are allowed to use IAM actions. However, the solutions architect does not have access to all the AWS accounts throughout the company. Which solution meets these requirements with the LEAST operational overhead?
Options
- ACreate an SCP that applies to all the AWS accounts to allow IAM actions only for administrator
- BConfigure AWS CloudTrail to invoke an AWS Lambda function for each event that is related to
- CCreate an SCP that applies to all the AWS accounts to deny IAM actions for all users except for
- DSet an IAM permissions boundary that allows IAM actions. Attach the permissions boundary to
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.