SOA-C02 · Question #362
A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts…
The correct answer is A. Add the accounts to an organizational unit (OU). Apply the SCPs to the OU. https://aws.amazon.com/blogs/industries/best-practices-for-aws-organizations-service-control- policies-in-a-multi-account-environment/
Question
A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts. What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?
Options
- AAdd the accounts to an organizational unit (OU). Apply the SCPs to the OU.
- BAdd the accounts to resource groups in AWS Resource Groups. Apply the SCPs to the resource
- CApply the SCPs to each developer account
- DEnroll the accounts with AWS Control Tower. Apply the SCPs to the AWS Control Tower
How the community answered
(18 responses)- A78% (14)
- B6% (1)
- C11% (2)
- D6% (1)
Explanation
https://aws.amazon.com/blogs/industries/best-practices-for-aws-organizations-service-control- policies-in-a-multi-account-environment/
Topics
Community Discussion
No community discussion yet for this question.