Correct Answer: Service Control Policy (SCP) at the root or OU level
SCPs provide centralized control over the maximum available permissions for all accounts in an organization....
Correct Answer
Service Control Policy (SCP) at the root or OU level
Why This Answer Is Correct
SCPs provide centralized control over the maximum available permissions for all accounts in an organization.
This question evaluates your knowledge of AWS IAM — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding AWS IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Which IAM policy type is used to set the maximum permissions that an identity-based policy can grant to an IAM user or role?
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?
What is the recommended way to grant an EC2 instance permission to call other AWS services (like S3 or DynamoDB)?
Which IAM feature allows an architect to verify which permissions in a policy are actually being used by an entity, helping to implement the 'principle of least privilege'?
A company wants to allow employees to log into the AWS Management Console using their existing corporate credentials from Microsoft Active Directory. Which service is required?