Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS is retiring this exam on Nov 16, 2026.
Replacement: SAP-C03 Practice Exam
Question 32 of 415
Free Preview · 415 of 1,381 · questions 1–415 of 1,381 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Definitely D, removing FullAWSAccess SCP will block everything
Best Practice: Replace FullAWSAccess with a tightly-scoped "Allow-only" SCP, and keep the policy clean and minimal. That ensures least privilege and scalability.
AWS advises you to replace the full access assigned by default in the SCP with your controlled SCP. Enabling SCPs gives you FullAWSAccess of the bat.