AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 228

Question

A security administrator is restricting the capabilities of company root user accounts. The company uses AWS Organizations and has all features enabled. The management account is used for billing and administrative purposes, but it is not used for operational AWS resource purposes. How can the security administrator restrict usage of member root user accounts across the organization?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create an OU in Organizations, and attach an SCP that controls usage of the root user. Add all member accounts to the new OU. AWS Organizations centrally governs and secures multiple AWS accounts. Service Control Policies set guardrails on what accounts in an organization can do.

AWS Certified Security - Specialty SCS-C02 — Question 228