SAP-C02 Question 377

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose BC1

  Question says "what COMBINATION of options", so the combination is 1. AWS org creation and 2. let business units operate as required.

• 3

  B and D correct Option B: Using AWS Organizations to create a new organization from a chosen payer account and defining an organizational unit hierarchy invites existing accounts to join the organization. This allows for centralized management of IAM usage across all accounts, meeting the security team's requirement. Additionally, this approach enables cost allocation and visibility into spending for each group, which meets the finance department's requirement. Option D: Enabling all features of AWS Organizations and establishing service control policies that filter IAM permissions for sub-accounts provides a comprehensive solution for centralized IAM control. This approach allows for fine-grained control over access and security across all accounts.

• Chose BD3

  Option BD not C: The management account has the responsibilities of a payer account and is responsible for paying all charges that are accrued by the member accounts. You can't change an organization's management account. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html