A Company with Several AWS Accounts Is Using AWS Organizations

question 85

Multiple Choice

A company with several AWS accounts is using AWS Organizations and service control policies (SCPs) . An Administrator created the following SCP and has attached it to an organizational unit (OU) that contains AWS account 1111-1111-1111: Developers working in account 1111-1111-1111 complain that they cannot create Amazon S3 buckets. How should the Administrator address this problem?

• A) Add s3:CreateBucket with "Allow" effect to the SCP. Add s3:CreateBucket with "Allow" effect to the SCP.
• B) Remove the account from the OU, and attach the SCP directly to account 1111-1111-1111.
• C) Instruct the Developers to add Amazon S3 permissions to their IAM entities.
• D) Remove the SCP from account 1111-1111-1111.

---

Definitions:

Agency Relationship

A legal arrangement where one party, the agent, acts on behalf of another, the principal, in engaging with third parties.

Mutual Agreement

A consent or accord reached by two or more parties, typically forming the basis for a contractual relationship.

Principal

The primary party to a transaction, such as a loan or investment, who has rights and obligations different from an agent or a trustee.

Agent

An individual or entity authorized to act on behalf of another person or organization in legal or business matters.