A Company Using AWS Organizations Requires That No Amazon S3

question 23

Multiple Choice

A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted. What is the SIMPLEST approach the SysOps administrator can take to ensure S3 buckets in those accounts can never be deleted?

• A) Set up MFA Delete on all the S3 buckets to prevent the buckets from being deleted.
• B) Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts. Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.
• C) Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts. Create an IAM group that has an IAM policy to deny the
• D) Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets. Use AWS Shield to deny the action on the AWS account instead of all S3 buckets.

---

Definitions:

Actin Filaments

Protein filaments in cells that are part of the cytoskeleton and play a vital role in muscle contraction, cell movement, and cell division.

Stratum Corneum

The most superficial sublayer of the human epidermis. Compare with stratum basale.

Vertebrate Skeleton

The internal structure composed of bones and cartilage that provides support, protection, and mobility to organisms in the vertebrate group.

Joint Capsules

Structures that enclose the ends of bones, creating a lubricated space for joint movement and stability.