SOA-C02 · Question #471
A company has multiple AWS accounts. The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account. Corporate policies state
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #471. The question stem and answer options stay visible for context.
Question
A company has multiple AWS accounts. The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account. Corporate policies state that developers may use only approved AWS services in the production account. What is the MOST operationally efficient solution to control the production account?
Options
- ACreate a customer managed policy in AWS Identity and Access Management (IAM). Apply the
- BCreate a job function policy in AWS Identity and Access Management (IAM). Apply the policy to
- CCreate a service control policy (SCP). Apply the SCP to the production OU.
- DCreate an IAM policy. Apply the policy in Amazon API Gateway to restrict the production account.
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.