AWS Solutions Architect Practice Questions - AWS Certified Solutions Architect - Associate (SAA-C03) Exam

Access More Questions

A company uses AWS Organizations with multiple accounts. A solutions architect needs to prevent developers in sandbox accounts from launching EC2 instances larger than t3.medium. Which approach satisfies this requirement with the least operational overhead?

Create IAM permission boundaries in each sandbox account Apply an SCP at the Organizational Unit (OU) level that denies ec2:RunInstances for instance types larger than t3.medium Use AWS Config rules to automatically terminate oversized instances Configure IAM policies for every developer IAM user in each sandbox account

Correct Answer:

Apply an SCP at the Organizational Unit (OU) level that denies ec2:RunInstances for instance types larger than t3.medium

Access more questions from this quiz

Continue to AWS Solutions Architect Practice Questions - AWS Certified Solutions Architect - Associate (SAA-C03) Exam for more practice questions and the full quiz experience.

Access More Questions