Exam CCSK topic 1 question 185 discussion

D. Establishing multiple accounts To help with account granularity and limit the blast radius in Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) environments, one effective strategy is to establish multiple accounts. This practice is commonly referred to as account isolation or account segmentation. By creating separate accounts based on specific roles, projects, or application environments, organizations can achieve finer granularity in access control and resource allocation. This approach reduces the potential blast radius of security incidents by isolating resources and minimizing the impact of any security issues that might occur within a specific account. The other options (A, B, C, and E) are also important security measures, but establishing multiple accounts is specifically focused on account granularity and reducing the potential blast radius, which aligns with the question's context.

Establishing multiple accounts with your provider will help with account granularity and to limit blast radius (with IaaS and PaaS).