AWS Certified Solutions Architect - Professional

ExamStudyApp

AWS Certified Solutions Architect - Professional · free preview Question 1 of 8

A company has 200 AWS accounts and needs to enforce that no account can disable CloudTrail. What is the most scalable control?

Enable MFA on each root user

Apply an SCP denying CloudTrail stop/delete actions org-wide

Use a CloudWatch alarm only

Add an IAM deny policy in each account manually

An unhandled error has occurred. Reload 🗙