AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 86

Question

A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts. What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Add the accounts to an organizational unit (OU). Apply the SCPs to the OU. Service Control Policies set guardrails on what accounts in an organization can do.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 86