AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 270

Question

A company is expanding. The company plans to separate its resources into hundreds of different AWS accounts in multiple AWS Regions. A solutions architect must recommend a solution that denies access to any operations outside of specifically designated Regions. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Launch an AWS Control Tower landing zone. Create OUs and attach SCPs that deny access to run services outside of the approved Regions. Service Control Policies set guardrails on what accounts in an organization can do. AWS Control Tower sets up and governs a secure multi-account landing zone.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 270