A Company Using AWS Organizations Requires That No Amazon S3

question 23

Multiple Choice

A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted. What is the SIMPLEST approach the SysOps administrator can take to ensure S3 buckets in those accounts can never be deleted?

• A) Set up MFA Delete on all the S3 buckets to prevent the buckets from being deleted.
• B) Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts. Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.
• C) Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts. Create an IAM group that has an IAM policy to deny the
• D) Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets. Use AWS Shield to deny the action on the AWS account instead of all S3 buckets.

---

Definitions:

Maker

The individual or entity that creates or signs a negotiable instrument, committing themselves to pay a specified amount of money to the payee or holder.

Primarily Liable

The primary obligation or responsibility to fulfill a debt or legal duty before others are considered liable.

Indorsers

Individuals who sign a negotiable instrument, other than as its maker, drawer, or acceptor, thereby assuming liability to future holders.

Insolvency Proceedings

Legal procedures undertaken when an individual or company is unable to meet its financial debts, aiming to distribute the debtor's assets among creditors and relieve the debtor of further liability.