Q42 — AWS SAA-C03 Ch.8

Question 42 of 65 | ← Chapter 8

Q537. A company is running its production and nonproduction environment workloads in multiple AWS accounts. The accounts are in an organization in AWS Organizations. The company needs to design a solution that will prevent the modification of cost usage tags.Which solution will meet these requirements?

• A. Create a custom AWS Config rule to prevent tag modification except by authorized principals.
• B. Create a custom trail in AWS CloudTrail to prevent tag modification.
• C. Create a service control policy (SCP) to prevent tag modification except by authorized principals. ✓
• D. Create custom Amazon CloudWatch logs to prevent tag modification.

Correct Answer: C. Create a service control policy (SCP) to prevent tag modification except by authorized principals.