A Company Has an AWS Account for Each Department and Wants

question 21

Multiple Choice

A company has an AWS account for each department and wants to consolidate billing and reduce overhead. The company wants to make sure that the finance team is denied from accessing services other than Amazon EC2, the security team is denied from accessing services other than AWS CloudTrail, and IT can access any resource. Which solution meets these requirements with the LEAST amount of operational overhead?

• A) Create a role for each department within AWS IAM and assign each role the necessary permissions.
• B) Create a user for each department within AWS IAM and assign each user the necessary permissions.
• C) Implement service control policies within AWS Organizations to determine which resources each department can access.
• D) Place each department into an organizational unit (OU) within AWS Organizations and use IAM policies to determine which resources they can access.

---

Definitions:

Peter the Great

A Russian czar in the late 17th and early 18th centuries, noted for his extensive reforms in an attempt to establish Russia as a great nation.

Western Scientific Ideas

Concepts and theories in science that originated or were developed in the Western world, impacting global understanding and practices.

Protestant Regions

Areas, especially in Europe, where Protestant Christianity is the dominant religion, often resulting from the Protestant Reformation in the 16th century.

Scientific Ideas

Concepts and explanations developed through the scientific method, contributing to the body of knowledge in fields such as physics, biology, chemistry, and earth sciences.