A Company Has Implemented AWS Organizations

question 95

Multiple Choice

A company has implemented AWS Organizations. It has recently set up a number of new accounts and wants to deny access to a specific set of AWS services in these new accounts. How can this be controlled MOST efficiently?

• A) Create an IAM policy in each account that denies access to the services. Associate the policy with an IAM group, and add all IAM users to the group.
• B) Create a service control policy that denies access to the services. Add all of the new accounts to a single organizational unit (OU), and apply the policy to that OU.
• C) Create an IAM policy in each account that denies access to the service. Associate the policy with an IAM role, and instruct users to log in using their corporate credentials and assume the IAM role.
• D) Create a service control policy that denies access to the services, and apply the policy to the root of the organization.

---

Definitions:

Put Option Contracts

A financial instrument that gives the holder the right, but not the obligation, to sell a specified amount of an underlying security at a predetermined price within a specified time frame.

Exercise Price

The specified price at which the holder of an option can buy (in the case of a call option) or sell (in the case of a put option) the underlying security or commodity.

Option Price

The cost at which an option's holder has the right to purchase (for a call option) or sell (for a put option) the underlying asset or commodity.

Market Value

The present rate at which a service or asset is available for purchase or sale in the market.