SCS-C02 · Question #191
SCS-C02 Question #191: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #191. The question stem and answer options stay visible for context.
Question
A company uses an organization in AWS Organizations to manage its AWS accounts. The company has implemented an SCP in the root account to prevent resources from being shared with external accounts. The company now needs to allow applications in its marketing team's AWS account to share resources with external accounts. The company must continue to prevent all the other accounts in the organization from sharing resources with external accounts. All the accounts in the organization are members of the same OU. Which solution will meet these requirements?
Options
- ACreate a new SCP in the marketing team's account Configure the SCP to explicitly allow resource
- BEdit the existing SCP to add a Condition statement that excludes the marketing team's account.
- CEdit the existing SCP to include an Allow statement that specifies the marketing team's account.
- DCreate an IAM permissions boundary policy to explicitly allow resource sharing Attach the policy
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.