A Large Company in Europe Plans to Migrate Its Applications

question 736

Multiple Choice

A large company in Europe plans to migrate its applications to the AWS Cloud. The company uses multiple AWS accounts for various business groups. A data privacy law requires the company to restrict developers' access to AWS European Regions only. What should the solutions architect do to meet this requirement with the LEAST amount of management overhead?

• A) Create IAM users and IAM groups in each account. Create IAM policies to limit access to non-European Regions. Attach the IAM policies to the IAM groups.
• B) Enable AWS Organizations, attach the AWS accounts, and create OUs for European Regions and non-European Regions. Create SCPs to limit access to non-European Regions and attach the policies to the OUs.
• C) Set up AWS Single Sign-On and attach AWS accounts. Create permission sets with policies to restrict access to non-European Regions. Create IAM users and IAM groups in each account.
• D) Enable AWS Organizations, attach the AWS accounts, and create OUs for European Regions and non-European Regions. Create permission sets with policies to restrict access to non-European Regions. Create IAM users and IAM groups in the primary account.

---

Definitions:

Complete Information

A scenario where all participants have access to all relevant information needed to make informed decisions.

Clearly Defined Problem

A problem that is explicitly understood and stated, with distinct boundaries and criteria for solving.

Classical Decision Theory

A theory that describes decision-making with an emphasis on rationality, where the decision maker is aware of all alternatives and their outcomes.

Rational Choices

Refers to decisions made after thoroughly considering the available options and their outcomes, based on logic and reason.