A Large Company Has Multiple AWS Accounts That Are Assigned

question 868

Multiple Choice

A large company has multiple AWS accounts that are assigned to each department. A SysOps administrator needs to help the company reduce overhead and manage its AWS resources more easily. The SysOps administrator also must ensure that department users, including AWS account root users, have access only to AWS services that are essential for their job function. Which solution will meet these requirements?

• A) Enable AWS Directory Service. Enforce Group Policy Objects (GPOs) on each department to restrict access.
• B) Migrate all the accounts to a central account. Create IAM groups for each department with only the necessary permissions.
• C) Use AWS Organizations and implement service control policies (SCPs) to ensure accounts use only essential AWS services.
• D) Use AWS Single Sign-On and configure it to limit access to only essential AWS services.

---

Definitions:

Famine

Famine is a severe shortage of food, often due to disaster, war, or economic failure, leading to widespread hunger and malnutrition.

Unequal Access

A situation where different groups or individuals have varying levels of access to resources, information, or opportunities, often leading to disparities and inequality.

Sex Ratio

A demographic measure indicating the number of males for every 100 females in a population.

Life Expectancy

The average period that an individual is expected to live, based on statistical averages of age, national health standards, and other factors.