A Company Has Implemented AWS Organizations

question 44

Multiple Choice

A company has implemented AWS Organizations. It has recently set up a number of new accounts and wants to deny access to a specific set of AWS services in these new accounts. How can this be controlled MOST efficiently?

• A) Create an IAM policy in each account that denies access to the services. Associate the policy with an IAM group, and add all IAM users to the group.
• B) Create a service control policy that denies access to the services. Add all of the new accounts to a single organizational unit (OU), and apply the policy to that OU.
• C) Create an IAM policy in each account that denies access to the services. Associate the policy with an IAM role, and instruct users to log in using their corporate credentials and assume the IAM role.
• D) Create a service control policy that denies access to the services, and apply the policy to the root of the organization.

---

Definitions:

Factor Analysis

Analyzing correlations among items to see which form related clusters.

Basic Traits

Fundamental personality characteristics that are thought to be universal and relatively stable over time.

Factor Analytic

A statistical method used to describe variability among observed, correlated variables in terms of a potentially lower number of unobserved variables called factors.

Big Five

An approach that defines personality in humans by five primary factors: openness, conscientiousness, extraversion, agreeableness, and neuroticism.