A Large Company Has Multiple AWS Accounts That Are Assigned

question 868

Multiple Choice

A large company has multiple AWS accounts that are assigned to each department. A SysOps administrator needs to help the company reduce overhead and manage its AWS resources more easily. The SysOps administrator also must ensure that department users, including AWS account root users, have access only to AWS services that are essential for their job function. Which solution will meet these requirements?

• A) Enable AWS Directory Service. Enforce Group Policy Objects (GPOs) on each department to restrict access.
• B) Migrate all the accounts to a central account. Create IAM groups for each department with only the necessary permissions.
• C) Use AWS Organizations and implement service control policies (SCPs) to ensure accounts use only essential AWS services.
• D) Use AWS Single Sign-On and configure it to limit access to only essential AWS services.

---

Definitions:

Maintenance Cost

Expenditures associated with the upkeep of buildings, equipment, and machines to ensure efficient operation and prolong their life.

Mixed Cost

A cost that contains both variable and fixed cost elements, meaning part of it changes with the level of activity while another part remains constant.

Machine Hour

A unit of measure representing the operation of a machine for one hour, used in accounting to allocate costs to products.

Factory Utility Cost

The expenses associated with the utilities consumed by a factory or manufacturing plant, such as electricity, gas, and water.