A Security Engineer Manages AWS Organizations for a Company

question 70

Multiple Choice

A Security Engineer manages AWS Organizations for a company. The Engineer would like to restrict AWS usage to allow Amazon S3 only in one of the organizational units (OUs) . The Engineer adds the following SCP to the OU: The next day, API calls to AWS IAM appear in AWS CloudTrail logs in an account under that OU. How should the Security Engineer resolve this issue?

• A) Move the account to a new OU and deny IAM:* permissions.
• B) Add a Deny policy for all non-S3 services at the account level.
• C) Change the policy to:
• D) Detach the default FullAWSAccess SCP.

---

Definitions:

Credit Terms

Conditions under which credit is extended by a seller to a buyer, detailing the repayment period, interest rate, and other rules governing the borrowing.

Perpetual Inventory Method

An accounting method that continuously updates the inventory levels and cost of goods sold with each sale or purchase of inventory.

Credit Terms

Conditions under which credit will be extended to a customer, including payment due dates and any discounts for early payment.

Accounts Payable Ledger

A subsidiary ledger containing all individual accounts for suppliers from whom the business has purchased on credit.