A Security Engineer Manages AWS Organizations for a Company

question 70

Multiple Choice

A Security Engineer manages AWS Organizations for a company. The Engineer would like to restrict AWS usage to allow Amazon S3 only in one of the organizational units (OUs) . The Engineer adds the following SCP to the OU: The next day, API calls to AWS IAM appear in AWS CloudTrail logs in an account under that OU. How should the Security Engineer resolve this issue?

• A) Move the account to a new OU and deny IAM:* permissions.
• B) Add a Deny policy for all non-S3 services at the account level.
• C) Change the policy to:
• D) Detach the default FullAWSAccess SCP.

---

Definitions:

Unionized Bottling Plant

A unionized bottling plant refers to a bottling facility where the workers are represented by a labor union, often influencing wages, working conditions, and negotiations.

Employment Of Labor

The engagement of individuals to perform tasks for wages or salary in various sectors and industries within an economy.

Input Markets

Markets where factors of production (such as labor, materials, and capital) are bought and sold.

Equilibrium

A state in a market where supply equals demand, and there is no external pressure to change the price or quantity.