Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Definitely D, removing FullAWSAccess SCP will block everything
Best Practice: Replace FullAWSAccess with a tightly-scoped "Allow-only" SCP, and keep the policy clean and minimal. That ensures least privilege and scalability.
AWS advises you to replace the full access assigned by default in the SCP with your controlled SCP. Enabling SCPs gives you FullAWSAccess of the bat.