ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 47 - SAP-C01 discussion

Report
Export

A large company in Europe plans to migrate its applications to the AWS Cloud. The company uses multiple AWS accounts for various business groups. A data privacy law requires the company to restrict developers’ access to AWS European Regions only.

What should the solutions architect do to meet this requirement with the LEAST amount of management overhead?

A.
Create IAM users and IAM groups in each account. Create IAM policies to limit access to non-European Regions. Attach the IAM policies to the IAM groups.
Answers
A.
Create IAM users and IAM groups in each account. Create IAM policies to limit access to non-European Regions. Attach the IAM policies to the IAM groups.
B.
Enable AWS Organizations, attach the AWS accounts, and create OUs for European Regions and non-European Regions. Create SCPs to limit access to non-European Regions and attach the policies to the OUs.
Answers
B.
Enable AWS Organizations, attach the AWS accounts, and create OUs for European Regions and non-European Regions. Create SCPs to limit access to non-European Regions and attach the policies to the OUs.
C.
Set up AWS Single Sign-On and attach AWS accounts. Create permission sets with policies to restrict access to non- European Regions. Create IAM users and IAM groups in each account.
Answers
C.
Set up AWS Single Sign-On and attach AWS accounts. Create permission sets with policies to restrict access to non- European Regions. Create IAM users and IAM groups in each account.
D.
Enable AWS Organizations, attach the AWS accounts, and create OUs for European Regions and non-European Regions. Create permission sets with policies to restrict access to non-European Regions. Create IAM users and IAM groups in the primary account.
Answers
D.
Enable AWS Organizations, attach the AWS accounts, and create OUs for European Regions and non-European Regions. Create permission sets with policies to restrict access to non-European Regions. Create IAM users and IAM groups in the primary account.
Suggested answer: B
asked 16/09/2024
Anupam Roy
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first