A Company Uses AWS Organizations to Manage Multiple AWS Accounts

question 145

Multiple Choice

A company uses AWS Organizations to manage multiple AWS accounts for different departments. The management account has an Amazon S3 bucket that contains project reports. The company wants to limit access to this S3 bucket to only users of accounts within the organization in AWS Organizations. Which solution meets these requirements with the LEAST amount of operational overhead?

• A) Add the aws:PrincipalOrgID global condition key with a reference to the organization ID to the S3 bucket policy.
• B) Create an organizational unit (OU) for each department. Add the aws:PrincipalOrgPaths global condition key to the S3 bucket policy.
• C) Use AWS CloudTrail to monitor the CreateAccount, InviteAccountToOrganization, LeaveOrganization, and RemoveAccountFromOrganization events. Update the S3 bucket policy accordingly.
• D) Tag each user that needs access to the S3 bucket. Add the aws:PrincipalTag global condition key to the S3 bucket policy.

---

Definitions:

Average Age

A statistical measure that represents the central or typical age in a population or group of objects, calculated by summing the ages and dividing by the number of subjects.

Health Care

The organized provision of medical services to individuals or communities to maintain or improve health, including prevention, diagnosis, treatment, and rehabilitation.

Deductibles and Copayments

are cost-sharing mechanisms in insurance policies where the insured must pay a fixed amount before the insurer covers expenses (deductible) and a portion of the cost of services (copayment).

Health Care Demanded

Refers to the quantity of health care services people are willing and able to purchase at different price levels.