Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
There is no such option in CT crate custom guardrail.
Seems like a bunch of people here have never used SCPs or CT. It's also a badly worded question, scp don't allow as such but allow can also mean not denying so you effectively allow certain instances types only for example, an SCP to allow burstable could be { "Effect": "Deny", "Action": "ec2:RunInstances", "Resource": "*", "Condition": { "StringNotLike": { "ec2:InstanceType": [ "t3.*", "t4g.*" ] } } } it doesn't mean you are allowing users to implicitly deploy without permissions. C is not a feature, it doesnt exist. you manage it with SCPs.
AWS Control Tower does not support creating custom preventive controls. You must use custom SCPs in AWS Organizations for custom preventive requirements.