Q4Security Foundations and Governance
A company is using AWS Organizations with the default SCP. The company needs to restrict AWS usage for all AWS accounts that are in a specific OU. Except for some desired global services, the AWS usage must occur only in the eu-west-1 Region for all accounts in the OU. A security engineer must create an SCP that applies the restriction to existing accounts and any new accounts in the OU. Which SCP will meet these requirements?
← → navigate · a answer
Community votes
Discussion · 2
C 2
Selected Answer: C
when String not equals "Us-west-1" (which means other region services), except "few global services" (Not Action) - deny all services.
C 1
Selected Answer: C
Letter C, for sure