A Security Team to Limit Access to Specific Services or Actions

question 574

Multiple Choice

A security team to limit access to specific services or actions in all of the team's AWS accounts. All accounts belong to a large organization in AWS Organizations. The solution must be scalable and there must be a single point where permission can be maintained. What should a solutions architect do to accomplish this?

• A) Create an ACL to provide access to the services or actions.
• B) Create a security group to allow accounts and attach it to user groups.
• C) Create cross-account roles in each account to deny access to the services or actions.
• D) Create a service control policy in the root organizational unit to deny access to the services or actions.

---

Definitions:

Student Loan

Financial aid designed to help students pay for tertiary education expenses, such as tuition, books, and living costs, which is required to be repaid with interest.

Interest

Interest refers to the feeling of wanting to learn more about something or to be involved in something.

Scholarships

Financial aid awards designed to support students' education, awarded on the basis of academic or other achievements.

FAFSA

Stands for Free Application for Federal Student Aid; it is a form completed by current and prospective college students in the United States to determine their eligibility for student financial aid.