Study. uk . com
  1. Home
  2. All questions
  3. Question 20

AWS Certified Solutions Architect study material · question 20 of 500

An administrator attaches a restrictive SCP and is surprised that their own actions in the management account are unaffected. Why?

  1. SCPs constrain member accounts only, never the management account
  2. SCPs take effect 24 hours after attachment
  3. SCPs are ignored for users who hold administrator policies
  4. SCPs apply only to roles, not to users
Show the answer

Answer: A. SCPs constrain member accounts only, never the management account

Users and roles in the management account are outside SCP reach; only member accounts, delegated administrators included, are constrained.

Source: Service control policies (SCPs) (Amazon Web Services) — SCPs don't affect users or roles in the management account

Challenge yourself on this topic → Study as cards