practice sheet · all objectives switch to smart practice →
AWS Certified Solutions Architect - Professional
A company's security team attaches an SCP to an OU that denies access to a set of AWS services. An account administrator in that OU then attaches the AdministratorAccess IAM policy to a role. A developer using that role reports they still cannot call one of the denied services. What is the correct explanation?
Explanation
An SCP defines a permission guardrail, or sets limits, on the actions that the IAM users and IAM roles in your organization can perform.
a user or role in the affected account can't use that permission, even if the account administrator attaches the AdministratorAccess IAM policy with */* permissions
A solutions architect needs to ensure that a specific service configuration—such as ensuring EC2 AMIs are never shared publicly—is consistently enforced across all member accounts, and remains enforced even as AWS introduces new APIs for that service. Which AWS Organizations policy type is most appropriate?
Explanation
you can ensure the configuration is always maintained across member accounts, even when the service introduces new features or APIs
Declarative policies automatically enforce and maintain your configuration across member accounts, regardless of future changes in AWS service APIs.
Locked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to review