A Security Engineer Must Enforce the Use of Only Amazon

question 197

Multiple Choice

A Security Engineer must enforce the use of only Amazon EC2, Amazon S3, Amazon RDS, Amazon DynamoDB, and AWS STS in specific accounts. What is a scalable and efficient approach to meet this requirement?

• A) Set up an AWS Organizations hierarchy, and replace the FullAWSAccess policy with the following Service Control Policy for the governed organization units:
• B) Create multiple IAM users for the regulated accounts, and attach the following policy statement to restrict services as required:
• C) Set up an Organizations hierarchy, replace the global FullAWSAccess with the following Service Control Policy at the top level:
• D) Set up all users in the Active Directory for federated access to all accounts in the company. Associate Active Directory groups with IAM groups, and attach the following policy statement to restrict services as required:

---

Definitions:

Role Clarity

The extent to which one's job responsibilities, expectations, and boundaries are clearly understood.

Role Acceptance

The process by which individuals agree to, and start performing, the behaviors expected of them in a particular role within a group or organization.

Role Performance

The enactment of behaviors or actions associated with a particular role in society or a specific context.

Performance Goals

Objectives set to assess the effectiveness or outcome of an action or series of actions, often used to evaluate success or progress in various contexts.