A company has several member accounts that are in an organization in AWS Organizations. The company recently d

Question

A company has several member accounts that are in an organization in AWS Organizations. The company recently discovered that administrators have been using account root user credentials. The company must prevent the administrators from using root user credentials to perform any actions on Amazon EC2 instances.

What should a SysOps administrator do to meet this requirement?

Accepted Answer

B. In the organization's management account, create a service control policy (SCP) to deny actions on EC2 instances by the root user in all member accounts.

Answer

A. Create an identity-based IAM policy in each member account to deny actions on EC2 instances by the root user.

Answer

C. Use AWS Config to prevent any actions on EC2 instances by the root user.

Answer

D. Use Amazon Inspector in each member account to scan for root user logins and to prevent any actions on EC2 instances by the root user.

Q27 — AWS SOA-C02 Ch.1

Correct Answer: B. In the organization's management account, create a service control policy (SCP) to deny actions on EC2 instances by the root user in all member accounts.

Explanation

Q27 — AWS SOA-C02 Ch.1

Correct Answer: B. In the organization&#39;s management account, create a service control policy (SCP) to deny actions on EC2 instances by the root user in all member accounts.

Explanation

Correct Answer: B. In the organization's management account, create a service control policy (SCP) to deny actions on EC2 instances by the root user in all member accounts.