AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 15

Question

A company is designing a multi-account structure for its development teams. The company is using AWS Organizations and AWS IAM Identity Center (AWS Single Sign-On). The company must implement a solution so that the development teams can use only specific AWS Regions and so that each AWS account allows access to only specific AWS services. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create SCPs that include the Condition, Resource, and NotAction elements to allow access to only the Regions and services that are needed. Service Control Policies set guardrails on what accounts in an organization can do.

AWS Certified Security - Specialty SCS-C02 — Question 15