A user is using AWS account root user credentials to try to close an AWS account that is managed by AWS Organizations. However, the attempt is unsuccessful.
What could cause this attempt to be unsuccessful?
A.
No multi-factor authentication (MFA) has been configured.
B.
The root user is not specifically assigned to the administration group.
C.
The root user's password does not meet the minimum password complexity requirements.
D.
The organizational administrator has used a service control policy (SCP) to limit the root user permissions.
D. The organizational administrator has used a service control policy (SCP) to limit the root user permissions.
When an AWS account is managed by AWS Organizations, the root user of the account has limited permissions to perform actions such as closing the account. The organizational administrator can use a service control policy (SCP) to limit the permissions of the root user and prevent them from performing certain actions, including closing the account. Therefore, if the root user is trying to close an AWS account that is managed by AWS Organizations and the attempt is unsuccessful, it is likely because the organizational administrator has used an SCP to limit the root user's permissions
An SCP restricts permissions for IAM users and roles in member accounts, including the member account's root user.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Pranava_GCP
1 year, 3 months agoGuru4Cloud
1 year, 7 months agoalexandercamachop
1 year, 8 months ago