A Company Has Multiple AWS Accounts That Are Part of AWS

question 151

Multiple Choice

A company has multiple AWS accounts that are part of AWS Organizations. The company's Security team wants to ensure that even those Administrators with full access to the company's AWS accounts are unable to access the company's Amazon S3 buckets. How should this be accomplished?

• A) Use SCPs.
• B) Add a permissions boundary to deny access to Amazon S3 and attach it to all roles.
• C) Use an S3 bucket policy.
• D) Create a VPC endpoint for Amazon S3 and deny statements for access to Amazon S3.

---

Definitions:

Unsatisfactory Progress

A term typically used in educational settings to describe a student's failure to meet established academic standards or performance benchmarks.

X-Ray Results

The findings obtained from radiographic imaging, used to diagnose or assess various medical conditions.

Medical Assistant

A healthcare professional who supports the work of physicians and other health professionals, usually in a clinic setting.

Discussing a Bill

The act of debating, scrutinizing, or deliberating over a proposed law or legislation within a governing body before it is passed or rejected.