Study. uk . com
  1. Home
  2. All questions
  3. Question 135

AWS Certified Solutions Architect study material · question 135 of 500

Why does AWS advise against attaching a new SCP directly to the organization root?

  1. Root-level SCPs apply only to the management account
  2. An untested policy there can lock every account out of services it relies on
  3. SCPs attached to the root are ignored
  4. The root can hold only one SCP at a time
Show the answer

Answer: B. An untested policy there can lock every account out of services it relies on

AWS suggests moving accounts into an OU a few at a time so the effect can be observed before it reaches the whole organization.

Source: Service control policies (SCPs) (Amazon Web Services) — Testing effects of SCPs

Challenge yourself on this topic → Study as cards