A Large Global Financial Services Company Has Multiple Business Units

question 804

Multiple Choice

A large global financial services company has multiple business units. The company wants to allow Developers to try new services, but there are multiple compliance requirements for different workloads. The Security team is concerned about the access strategy for on-premises and AWS implementations. They would like to enforce governance for AWS services used by business teams for regulatory workloads, including Payment Card Industry (PCI) requirements. Which solution will address the Security team's concerns and allow the Developers to try new services?

• A) Implement a strong identity and access management model that includes users, groups, and roles in various AWS accounts. Ensure that centralized AWS CloudTrail logging is enabled to detect anomalies. Build automation with AWS Lambda to tear down unapproved AWS resources for governance.
• B) Build a multi-account strategy based on business units, environments, and specific regulatory requirements. Implement SAML-based federation across all AWS accounts with an on-premises identity store. Use AWS Organizations and build organizational units (OUs) structure based on regulations and service governance. Implement service control policies across OUs.
• C) Implement a multi-account strategy based on business units, environments, and specific regulatory requirements. Ensure that only PCI-compliant services are approved for use in the accounts. Build IAM policies to give access to only PCI-compliant services for governance.
• D) Build one AWS account for the company for strong security controls. Ensure that all the service limits are raised to meet company scalability requirements. Implement SAML federation with an on-premises identity store, and ensure that only approved services are used in the account.

---

Definitions:

Long-Term Benefits

Advantages or positive outcomes that occur over an extended period, often as a result of strategic planning or investment.

Founder's Disease

A situation where an organization's growth and progress are hindered by the original founder's inability to delegate tasks and adapt to changing leadership needs.

Instructional Excellence

The ability to design and deliver highly effective and engaging educational experiences, often characterized by innovative teaching methods and a deep understanding of subject matter.

Average Class Size

A statistical measure indicating the mean number of students per class in an educational institution, used as an indicator of learning environment quality.