AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 334

Question

A company has multiple AWS accounts. The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account. Corporate policies state that developers may use only approved AWS services in the production account. What is the MOST operationally efficient solution to control the production account?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a service control policy (SCP). Apply the SCP to the production OU. Service Control Policies set guardrails on what accounts in an organization can do.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 334