Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 548 discussion

A company has separate AWS accounts for its finance, data analytics, and development departments. Because of costs and security concerns, the company wants to control which services each AWS account can use.

Which solution will meet these requirements with the LEAST operational overhead?

  • A. Use AWS Systems Manager templates to control which AWS services each department can use.
  • B. Create organization units (OUs) for each department in AWS Organizations. Attach service control policies (SCPs) to the OUs.
  • C. Use AWS CloudFormation to automatically provision only the AWS services that each department can use.
  • D. Set up a list of products in AWS Service Catalog in the AWS accounts to manage and control the usage of specific AWS services.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
awsgeek75
9 months, 1 week ago
Selected Answer: B
Departments = Organizational Units
upvoted 1 times
...
TariqKipkemei
11 months ago
Selected Answer: B
Create organization units (OUs) for each department in AWS Organizations. Attach service control policies (SCPs) to the OUs
upvoted 1 times
...
ssa03
1 year, 1 month ago
Selected Answer: B
Correct Answer: B
upvoted 1 times
...
lemur88
1 year, 1 month ago
Selected Answer: B
SCPs to centralize permissioning
upvoted 1 times
...
Guru4Cloud
1 year, 1 month ago
Selected Answer: B
Create organization units (OUs) for each department in AWS Organizations. Attach service control policies (SCPs) to the OUs.
upvoted 1 times
...
xyb
1 year, 2 months ago
Selected Answer: B
control services --> SCP
upvoted 1 times
...
Ale1973
1 year, 2 months ago
Selected Answer: D
My rational: Scenary is "A company has separate AWS accounts", it is not mentioning anything about use of Organizations or needs related to centralized managment of these accounts. Then, set up a list of products in AWS Service Catalog in the AWS accounts (on each AWS account) is the best way to manage and control the usage of specific AWS services.
upvoted 1 times
pentium75
9 months, 2 weeks ago
"Separate AWS accounts" just says that it's multiple accounts, it does not indicate that they are NOT connected into a organization. Service Catalog alone does not restrict anything. You'd need to create a service in Service Catalog for everything you're allowing to use, then grant permissions on those services, and you'd need to remove other permissions from everyone. All of which is not mentioned in D. Just "setting up a list of products in AWS Service Catalog in the AWS accounts" will not restrict anyone from doing what he could do before.
upvoted 2 times
...
...
mrsoa
1 year, 2 months ago
Selected Answer: B
BBBBBBBBB
upvoted 1 times
...
Deepakin96
1 year, 2 months ago
Selected Answer: B
To control different AWS account you required AWS Organisation
upvoted 1 times
...
Bmaster
1 year, 2 months ago
B is correct!!!!
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...