AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 168

Question

A security team wants to limit access to specific services or actions in all of the team’s AWS accounts. All accounts belong to a large organization in AWS Organizations. The solution must be scalable and there must be a single point where permissions can be maintained. What should a solutions architect do to accomplish this?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create a service control policy in the root organizational unit to deny access to the services or actions.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 168