ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 861 - SAP-C01 discussion

Report
Export

A company is in the process of implementing AWS Organizations to constrain its developers to use only Amazon EC2, Amazon S3, and Amazon DynamoDB. The Developers account resides in a dedicated organizational unit (OU). The Solutions Architect has implemented the following SCP on the Developers account:

When this policy is deployed, IAM users in the Developers account are still able to use AWS services that are not listed in the policy. What should the Solutions Architect do to eliminate the Developers’ ability to use services outside the scope of this policy?

A.
Create an explicit deny statement for each AWS service that should be constrained.
Answers
A.
Create an explicit deny statement for each AWS service that should be constrained.
B.
Remove the FullAWSAccess SCP from the Developer account’s OU.
Answers
B.
Remove the FullAWSAccess SCP from the Developer account’s OU.
C.
Modify the FullAWSAccess SCP to explicitly deny all services.
Answers
C.
Modify the FullAWSAccess SCP to explicitly deny all services.
D.
Add an explicit deny statement using a wildcard to the end of the SCP.
Answers
D.
Add an explicit deny statement using a wildcard to the end of the SCP.
Suggested answer: B
asked 16/09/2024
Josue Medrano Caldera
21 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first