AWS Certification Exam AI Practitioner (Practice Questions) set2
通常
試験時間: 00:00問題時間: 00:00
問題一覧
問題 28 / 65
In a multi-account environment, if you want to prohibit the creation of resources in specific regions across the entire organization to enforce compliance, which mechanism is most appropriate?
①Create separate IAM policies for each account.
②Distribute blocking rules using a CloudFormation template
③Detect violations with AWS Config rules and then take action.
④Apply restrictions to organizational units using Service Control Policies (SCP) in AWS Organizations
⑤Control with an S3 bucket policy