A Company Is Running Multiple Workloads in the AWS Cloud

question 680

Multiple Choice

A company is running multiple workloads in the AWS Cloud. The company has separate units for software development. The company uses AWS Organizations and federation with SAML to give permissions to developers to manage resources in their AWS accounts. The development units each deploy their production workloads into a common production account. Recently, an incident occurred in the production account in which members of a development unit terminated an EC2 instance that belonged to a different development unit. A solutions architect must create a solution that prevents a similar incident from happening in the future. The solution also must allow developers the possibility to manage the instances used for their workloads. Which strategy will meet these requirements?

• A) Create separate OUs in AWS Organizations for each development unit. Assign the created OUs to the company AWS accounts. Create separate SCPs with a deny action and a StringNotEquals condition for the DevelopmentUnit resource tag that matches the development unit name. Assign the SCP to the corresponding OU.
• B) Pass an attribute for DevelopmentUnit as an AWS Security Token Service (AWS STS) session tag during SAML federation. Update the IAM policy for the developers' assumed IAM role with a deny action and a StringNotEquals condition for the DevelopmentUnit resource tag and aws:PrincipalTag/DevelopmentUnit.
• C) Pass an attribute for DevelopmentUnit as an AWS Security Token Service (AWS STS) session tag during SAML federation. Create an SCP with an allow action and a StringEquals condition for the DevelopmentUnit resource tag and aws:PrincipalTag/DevelopmentUnit. Assign the SCP to the root OU.
• D) Create separate IAM policies for each development unit. For every IAM policy, add an allow action and a StringEquals condition for the DevelopmentUnit resource tag and the development unit name. During SAML federation, use AWS Security Token Service (AWS STS) to assign the IAM policy and match the development unit name to the assumed IAM role.

Learn about the concept of genomic imprinting and its importance.

Understand the role and methods of gene targeting in studying genetic diseases.

Understand the principles and strategies for delivering bad news in business communications.

Identify and utilize various formats (direct and indirect) for communicating bad news.

---

Definitions:

Standard Deviation

A measure of the amount of variation or dispersion of a set of values, used to indicate how much individuals within a dataset deviate from the mean.

Intelligence Quotient

A measure of a person's intellectual abilities in relation to their age group, typically assessed through standardized tests.

Crystallized Intelligence

The ability to use learned knowledge and experience in problem-solving and adapting to new situations.

Core Concepts

Fundamental ideas, principles, or beliefs that form the foundation for a subject, discipline, or thought system.