AWS Certified Cloud Practitioner
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company wants to automate the creation of new AWS accounts and automatically prevent all users from creating Amazon EC2 instances. Which AWS service provides this functionality?
Real Exam
Community
RRitesh
A
AWS Service Catalog
B
AWS Organizations
C
EC2 Image Builder
D
AWS Systems Manager
Explanation:
Explanation
AWS Organizations is the correct answer because:
-
Automated Account Creation: AWS Organizations allows you to programmatically create new AWS accounts through APIs, enabling automation of account provisioning.
-
Service Control Policies (SCPs): AWS Organizations provides SCPs that allow you to set centralized permissions across all accounts in your organization. You can use SCPs to prevent users from creating EC2 instances across all member accounts.
-
Centralized Management: Organizations provides a single place to manage multiple AWS accounts, including security policies, compliance requirements, and resource sharing.
Why the other options are incorrect:
-
AWS Service Catalog: Manages approved IT services and products, not account creation or EC2 instance restrictions.
-
EC2 Image Builder: Automates the creation, maintenance, and validation of EC2 AMIs, not account management or permissions.
-
AWS Systems Manager: Provides operational insights and automates operational tasks, but doesn't handle account creation or organization-wide permissions.
AWS Organizations is specifically designed for multi-account management with centralized security controls through SCPs.
Comments
Loading comments...