Which AWS feature should the SysOps administrator use to meet these requirements?

A company has deployed AWS Security Hub and AWS Config in a newly implemented organization in AWS Organizations. A SysOps administrator must implement a solution to restrict all member accounts in the organization from deploying Amazon EC2 resources in the ap-southeast-2 Region. The solution must be implemented from a single point and must govern an current and future accounts. The use of root credentials also must be restricted in member accounts.

Which AWS feature should the SysOps administrator use to meet these requirements?
A . AWS Config aggregator
B . IAM user permissions boundaries
C . AWS Organizations service control policies (SCPs)
D . AWS Security Hub conformance packs

View Answer

Answer: C