A company deployed IAM Organizations to help manage its increasing number of IAM accounts.

Question

A company deployed IAM Organizations to help manage its increasing number of IAM accounts. A security engineer wants to ensure only principals in the Organization structure can access a speciﬁc Amazon S3 bucket. The solution must also minimize operational overhead
Which solution will meet these requirements?

Accepted Answer

D. Specify the organization ID in the global key condition element of a bucket policy, allowing all principals access.

Answer

A. 1 Put all users into an IAM group with an access policy granting access to the J bucket.

Answer

B. Have the account creation trigger an IAM Lambda function that manages the bucket policy, allowing access to accounts listed in the policy only.

Answer

C. Add an SCP to the Organizations master account, allowing all principals access to the bucket.

Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

Exam SCS-C02 All Questions

Amazon Web Services AWS Certified Specialty SCS-C02 Question # 77 Topic 8 Discussion

Correct Answer:

Options Selected by Other Users:

Contribute your Thoughts: