A Company Has Implemented AWS Organizations

question 95

Multiple Choice

A company has implemented AWS Organizations. It has recently set up a number of new accounts and wants to deny access to a specific set of AWS services in these new accounts. How can this be controlled MOST efficiently?

• A) Create an IAM policy in each account that denies access to the services. Associate the policy with an IAM group, and add all IAM users to the group.
• B) Create a service control policy that denies access to the services. Add all of the new accounts to a single organizational unit (OU), and apply the policy to that OU.
• C) Create an IAM policy in each account that denies access to the service. Associate the policy with an IAM role, and instruct users to log in using their corporate credentials and assume the IAM role.
• D) Create a service control policy that denies access to the services, and apply the policy to the root of the organization.

---

Definitions:

AV Node

The atrioventricular node, a part of the heart's electrical system that acts as a gatekeeper, slowing the electrical current before it passes from the atria to the ventricles.

SA Node

The sinoatrial node, also known as the heart's natural pacemaker, is a cluster of cells situated in the right atrium of the heart that regulates the heart's rhythm by generating electrical impulses.

Bundle of His

A collection of heart muscle cells specialized for electrical conduction that transmits the electrical impulses from the atrioventricular node to the ventricles of the heart.

Electrocardiogram

A test that measures the electrical activity of the heart to detect heart problems and monitor heart health.