AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 258

Question

A company is using AWS Organizations with the default SCP. The company needs to restrict AWS usage for all AWS accounts that are in a specific OU.

Except for some desired global services, the AWS usage must occur only in the eu-west-1 Region for all accounts in the OU. A security engineer must create an SCP that applies the restriction to existing accounts and any new accounts in the OU.

Which SCP will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Compare the policy/code shown in each option image.

AWS Certified Security - Specialty SCS-C02 — Question 258