AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 789

Question

A company needs a solution to prevent AWS CloudFormation stacks from deploying AWS Identity and Access Management (IAM) resources that include an inline policy or “*” in the statement. The solution must also prohibit deployment of Amazon EC2 instances with public IP addresses. The company has AWS Control Tower enabled in its organization in AWS Organizations. Which solution will meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Use AWS Control Tower proactive controls to block deployment of EC2 instances with public IP addresses and inline policies with elevated access or “*”. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Control Tower sets up and governs a secure multi-account landing zone.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 789