AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 134

Question

A company uses AWS Organizations to manage its AWS accounts. The organization root has an OU that is named Environments. The Environments OU has two child OUs that are named Development and Production, respectively. The Environments OU and the child OUs have the default FullAWSAccess policy in place. A DevOps engineer plans to remove the FullAWSAccess policy from the Development OU and replace the policy with a policy that allows all actions on Amazon EC2 resources. What will be the outcome of this policy replacement?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: All users in the Development OU will be allowed all API actions on EC2 resources. All other API actions will be denied. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 134