Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Correct answers are A and D. A ensures all accounts are in an org with SCP support. D applies a Service Control Policy to prevent business units from purchasing or modifying Reserved Instances, enforcing the centralized process securely. IAM policies (C) are not scalable, and Config (B) is for monitoring, not enforcement. E doesn’t help unless all features are enabled.
A. Ensure that all AWS accounts are part of an organization in AWS Organizations with all features enabled. D. Create an SCP that denies the ec2:PurchaseReservedInstancesOffering action and the ec2:ModifyReservedInstances action. Attach the SCP to each OU of the organization.
A and D