Q12 — AWS SAA-C03 Ch.9

Question 12 of 40 | ← Chapter 9

Q572. A 4-year-old media company is using the AWS Organizations all features feature set to organize its AWS accounts. According to the company's finance team, the billing information on the member accounts must not be accessible to anyone, including the root user of the member accounts.Which solution will meet these requirements?

• A. Add all finance team users to an IAM group. Attach an AWS managed policy named Billing to the group.
• B. Attach an identity-based policy to deny access to the billing information to all users, including the root user.
• C. Create a service control policy (SCP) to deny access to the billing information. Attach the SCP to the root organizational unit (OU). ✓
• D. Convert from the Organizations all features feature set to the Organizations consolidated billing feature set.

Correct Answer: C. Create a service control policy (SCP) to deny access to the billing information. Attach the SCP to the root organizational unit (OU).