AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 168

Question

A company has a few AWS accounts for development and wants to move its production application to AWS. The company needs to enforce Amazon Elastic Block Store (Amazon EBS) encryption at rest current production accounts and future production accounts only. The company needs a solution that includes built-in blueprints and guardrails. Which combination of steps will meet these requirements? (Choose three.)

Accepted Answer

Correct answer: C, D, F. The correct answer is C, D, F. Option C: Create a new AWS Control Tower landing zone in the company’s management account. Add production and development accounts to production and development OUs. respectively. Option D: Invite existing accounts to join the organization in AWS Organizations. Create SCPs to ensure compliance. Option F: Create a guardrail for the production OU to detect EBS encryption. Amazon EBS provides block storage attached to a single EC2 instance. AWS Organizations centrally governs and secures multiple AWS accounts. Service Control Policies set guardrails on what accounts in an organization can do.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 168