A company has implemented AWS Organizations. It has recently set up a number of new accounts and wants to deny access to a specific set of AWS services in these new accounts. How can this be controlled MOST efficiently?

Question

Patrick Evelinton de Souza Borges · Accepted Answer

Create a service control policy that denies access to the services. Add all of the new accounts to a single organizational unit (OU), and apply the policy to that OU.

Patrick Evelinton de Souza Borges · Answer

Create an IAM policy in each account that denies access to the services. Associate the policy with an IAM group, and add all IAM users to the group.

Patrick Evelinton de Souza Borges · Answer

Create an IAM policy in each account that denies access to the services. Associate the policy with an IAM role, and instruct users to log in using their corporate credentials and assume the IAM role.

Patrick Evelinton de Souza Borges · Answer

Create a service control policy that denies access to the services, and apply the policy to the root of the organization.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 562 - SAP-C01 discussion

Suggested answer: B

0 comments