Answer-first summary for fast verification
Answer: Create an organization from the master account. Send invitations to the secondary accounts from the master account. Accept the invitations and create an OU., Create a service control policy (SCP) that enables full EC2 access, and attach the policy to the OU.
1. Answer A: Creating an organization from the master account and sending invitations to the secondary accounts is the first step to consolidate all accounts into one organization. Once the secondary accounts accept the invitations, an Organizational Unit (OU) can be created to manage them effectively. This step meets the requirement of consolidating all accounts into one organization and allows for easier management of multiple accounts. 2. Answer D: Creating a service control policy (SCP) with full EC2 access and attaching it to the OU ensures that all accounts within the organization, including the master and secondary accounts, have the necessary permissions to access Amazon EC2 services. This meets the requirement of allowing full access to the Amazon EC2 service from all accounts. Additionally, using SCPs helps maintain a consistent level of access control across the organization, making it easier to manage permissions as new accounts are added.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
A Solutions Architect is designing a multi-account structure that has 10 existing accounts. The design must meet the following requirements: Consolidate all accounts into one organization. Allow full access to the Amazon EC2 service from the master account and the secondary accounts. Minimize the effort required to add additional secondary accounts. Which combination of steps should be included in the solution? (Choose two.)
A
Create an organization from the master account. Send invitations to the secondary accounts from the master account. Accept the invitations and create an OU.
B
Create an organization from the master account. Send a join request to the master account from each secondary account. Accept the requests and create an OU.
C
Create a VPC peering connection between the master account and the secondary accounts. Accept the request for the VPC peering connection.
D
Create a service control policy (SCP) that enables full EC2 access, and attach the policy to the OU.
E
Create a full EC2 access policy and map the policy to a role in each account. Trust every other account to assume the role.