AWS Certified Solutions Architect - Professional SAP-C02 — Question 379

• AUse a collection of parameterized AWS CloudFormation templates defining common IAM permissions that are launched into each account. Require all new and existing accounts to launch the appropriate stacks to enforce the least privilege model.
• BUse AWS Organizations to create a new organization from a chosen payer account and define an organizational unit hierarchy. Invite the existing accounts to join the organization and create new accounts using Organizations.
• CRequire each business unit to use its own AWS accounts. Tag each AWS account appropriately and enable Cost Explorer to administer chargebacks.
• DEnable all features of AWS Organizations and establish appropriate service control policies that filter IAM permissions for sub-accounts.
• EConsolidate all of the company's AWS accounts into a single AWS account. Use tags for billing purposes and the IAM’s Access Advisor feature to enforce the least privilege model.

Select 2 answers to reveal the result.