A Company Using AWS Organizations Requires That No Amazon S3

question 346

Multiple Choice

A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted. What is the SIMPLEST approach the SysOps Administrator can take to ensure S3 buckets in those accounts can never be deleted?

• A) Set up MFA Delete on all the S3 buckets to prevent the buckets from being ddeleted.
• B) Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts. Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.
• C) Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts. Create an IAM group that has an IAM policy to deny the
• D) Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets. Use AWS Shield to deny the action on the AWS account instead of all S3 buckets.

---

Definitions:

Perspective

An attitude towards or way of regarding something; a point of view.

Congruence

Fit between interests and work environment. The greater the congruence, the greater the predicted job satisfaction.

Work Environment

The physical and psychological conditions under which employees operate, encompassing aspects like office layout, safety standards, company culture, and interpersonal relationships.

Differentiation

The difference between the highest and lowest interest types. Well-differentiated interests predict more stable occupational choices.