Answer-first summary for fast verification
Answer: Create an organization from the master account. Send invitations to the secondary accounts from the master account. Accept the invitations and create an OU, Create a service control policy (SCP) that enables full EC2 access, and attach the policy to the OU.
A: **Create an organization from the master account. Send invitations to the secondary accounts from the master account. Accept the invitations and create an OU.** Explanation: By creating an AWS Organization from the master account, you can centrally manage and consolidate billing, manage policies and apply centralized controls across all accounts. Invitations are sent to the secondary accounts to join the organization, ensuring streamlined and consistent management across them. Creating an Organizational Unit (OU) allows grouping of secondary accounts under a single administrative unit, making policy application and account management easier. D: **Create a service control policy (SCP) that enables full EC2 access, and attach the policy to the OU.** Explanation: Service Control Policies (SCPs) are a type of organization policy that enable or disable AWS service actions for the accounts in an OU. By creating an SCP that grants full EC2 access, and attaching it to the OU, you ensure that all current and future accounts within that OU inherit the same permissions, effectively reducing the effort associated with managing access and maintaining consistent permissions as new secondary accounts are added. This approach aligns with the goal of reducing the administrative overhead of adding new accounts while ensuring full EC2 access.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
A Solutions Architect is tasked with the responsibility of developing a multi- account framework with ten existing accounts. The design must adhere to the following specifications: Consolidate all accounts into a single entity. Allow both the master and secondary accounts to have full access to the Amazon EC2 service. Reduce the effort associated with adding new secondary accounts. Which mix of phases should the solution include? (Select two.)
A
Create an organization from the master account. Send invitations to the secondary accounts from the master account. Accept the invitations and create an OU
B
Create an organization from the master account. Send a join request to the master account from each secondary account. Accept the requests and create an OU.
C
Create a VPC peering connection between the master account and the secondary accounts. Accept the request for the VPC peering connection.
D
Create a service control policy (SCP) that enables full EC2 access, and attach the policy to the OU.
E
Create a full EC2 access policy and map the policy to a role in each account. Trust every other account to assume the role.