A Company Has Multiple AWS Accounts That Are Part of AWS

question 151

Multiple Choice

A company has multiple AWS accounts that are part of AWS Organizations. The company's Security team wants to ensure that even those Administrators with full access to the company's AWS accounts are unable to access the company's Amazon S3 buckets. How should this be accomplished?

• A) Use SCPs.
• B) Add a permissions boundary to deny access to Amazon S3 and attach it to all roles.
• C) Use an S3 bucket policy.
• D) Create a VPC endpoint for Amazon S3 and deny statements for access to Amazon S3.

---

Definitions:

Stock Trust

A legal entity that holds and manages stock investments on behalf of its beneficiaries.

Managed Behalf

Acting or making decisions for another person or entity, typically in a professional or representative capacity.

Employee Participation

Involvement of employees in the decision-making processes of an organization, aiming to increase engagement and morale.

Pay-Related Decisions

Choices made by employers regarding compensation, including wages, salaries, bonuses, and benefits, directly affecting employee remuneration.