A company has deployed AWS Security Hub and AWS Config in a newly implemented organization...

Vendor: Amazon Web Services
Product: SOA-C02
Update on: Jul 30, 2025
Questions: 556

Amazon Web Services SOA-C02 Question Answer

A company has deployed AWS Security Hub and AWS Config in a newly implemented organization in AWS Organizations. A SysOps administrator must implement a solution to restrict all member accounts in the organization from deploying Amazon EC2 resources in the ap-southeast-2 Region. The solution must be implemented from a single point and must govern an current and future accounts. The use of root credentials also must be restricted in member accounts.

Which AWS feature should the SysOps administrator use to meet these requirements?

AWS Config aggregator

IAM user permissions boundaries

AWS Organizations service control policies (SCPs)

AWS Security Hub conformance packs