A Solutions Architect Is Designing a Security Solution for a Company

question 73

Multiple Choice

A solutions architect is designing a security solution for a company that wants to provide developers with individual AWS accounts through AWS Organizations, while also maintaining standard security controls. Because the individual developers will have AWS account root user-level access to their own accounts, the solutions architect wants to ensure that the mandatory AWS CloudTrail configuration that is applied to new developer accounts is not modified. Which action meets these requirements?

• A) Create an IAM policy that prohibits changes to CloudTrail, and attach it to the root user.
• B) Create a new trail in CloudTrail from within the developer accounts with the organization trails option enabled.
• C) Create a service control policy (SCP) the prohibits changes to CloudTrail, and attach it the developer accounts.
• D) Create a service-linked role for CloudTrail with a policy condition that allows changes only from an Amazon Resource Name (ARN) in the master account.

---

Definitions:

Resource Commitments

The allocation or dedication of organizational resources, such as time, money, and personnel, towards a specific project or objective.

Social Responsibility

The duty of individuals, organizations, and businesses to act in the best interest of society at large, often encompassing ethical, environmental, and philanthropic considerations.

Public Opinion Survey

A research method used to collect information on the public's views and attitudes towards various topics or issues.

Ethical Responsibility

The duty to act in a morally correct manner, considering the impact of one’s actions on others and adhering to principles of fairness and justice.