A Company Is Managing Multiple AWS Accounts Using AWS Organizations

question 148

Multiple Choice

A company is managing multiple AWS accounts using AWS Organizations. One of these accounts is used only for retaining logs in an Amazon S3 bucket. The company wants to make sure that compute resources cannot be used in the account. How can this be accomplished with the LEAST administrative effort?

• A) Apply an IAM policy to all IAM entities in the account with a statement to explicitly deny NotAction: s3:*.
• B) Configure AWS Config to terminate compute resources that have been created in the accounts.
• C) Configure AWS CloudTrail to block any action where the event source is not s3:amazonaws.com.
• D) Update the service control policy on the account to deny the unapproved services.

---

Definitions:

Epigenetic Molecules

Chemical compounds that can modify the activity of genes without altering the DNA sequence, playing a critical role in gene expression and regulation.

Corpus Callosum

A large band of neural fibers connecting the two hemispheres of the brain and facilitating communication between them.

Cerebellum

A major structure of the hindbrain that is involved in motor control and coordination.

Right Hemisphere

The right half of the brain, which is responsible for spatial abilities, face recognition, visual imagery, and processing music and art.