A Company Is Using AWS Organizations to Manage All Their

question 532

Multiple Choice

A company is using AWS Organizations to manage all their accounts. The Chief Technology Officer wants to prevent certain services from being used within production accounts until the services have been internally certified. They are willing to allow developers to experiment with these uncertified services in development accounts but need a way to ensure that these services are not used within production accounts. Which option ensures that services are not allowed within the production accounts, yet are allowed in separate development accounts within the LEAST administrative overhead?

• A) Use AWS Config to shut down non-compliant services found within the production accounts on a periodic basis, while allowing these same services to run in the development accounts.
• B) Apply service control policies to the AWS Organizational Unit (OU) containing the production accounts to whitelist certified services. Apply a less restrictive policy to the OUs containing the development accounts.
• C) Use IAM policies applied to the combination of user and account to prevent developers from using these services within the production accounts. Allow the services to run in development accounts.
• D) Use Amazon CloudWatch to report on the use of non-certified services within any account, triggering an AWS Lambda function to terminate only those non-certified services when found in a production account.

---

Definitions:

General Ledger

The comprehensive set of accounts that records all financial transactions of a business.

Horizontal Analysis

A financial analysis technique that compares line items in financial statements over a series of periods to identify trends and growth patterns.

Segment Data

This refers to the financial information that is reported separately for different divisions or segments of a company, providing insight into the performance of each segment.

Recent Years

A term referring to the latest or last few years, without a precise timeframe but generally considered to encompass the immediate past.