AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 872

Question

A development team uses multiple AWS accounts for its development, staging, and production environments. Team members have been launching large Amazon EC2 instances that are underutilized. A solutions architect must prevent large instances from being launched in all accounts. How can the solutions architect meet this requirement with the LEAST operational overhead?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create an organization in AWS Organizations in the management account with the default policy. Create a service control policy (SCP) that denies the launch of large EC2 instances, and apply it to the AWS accounts. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Organizations centrally governs and secures multiple AWS accounts. Service Control Policies set guardrails on what accounts in an organization can do.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 872