AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 410

Question

A company is using AWS Control Tower to manage AWS accounts in an organization in AWS Organizations. The company has an OU that contains accounts. The company must prevent any new or existing Amazon EC2 instances in the OU's accounts from gaining a public IP address. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create an SCP that prevents the launch of instances that have a public IP address. Additionally, configure the SCP to prevent the attachment of a public IP address to existing instances. Attach the SCP to the OU. Service Control Policies set guardrails on what accounts in an organization can do. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 410