...
/SAA-C03 Domain 1: Design Secure Architectures Questions
SAA-C03 Domain 1: Design Secure Architectures Questions
Test your understanding of AWS security best practices, including identity and access management, cross-account controls, and data protection. Evaluate scenarios involving preventative guardrails, private access enforcement, immutable logging, secure third-party access, and encryption key management.
We'll cover the following...
Question 1
A company uses AWS Organizations and wants to ensure that no IAM principal in any member account can make an Amazon S3 bucket public, either through bucket policies or public ACLs. The security team requires a solution that is preventative and centrally enforced across all accounts.
Which solution should a solutions architect implement to meet these requirements?
A. Enable S3 Block Public Access on each bucket and require developers to keep it enabled.
B. Enable AWS Config managed rules to detect public buckets and run remediation.
C. Use a Service Control Policy (SCP) to deny s3:PutBucketPolicy and s3:PutBucketAcl for all principals in member ...