Amazon Exam SCS-C02 Topic 2 Question 43 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 43
Topic #: 2

A healthcare company has multiple AWS accounts in an organization in AWS Organizations. The company uses Amazon S3 buckets to store sensitive information of patients. The company needs to restrict users from deleting any S3 bucket across the organization.

What is the MOST scalable solution that meets these requirements?

APermissions boundaries in AWS Identity and Access Management (1AM)

BS3 bucket policies

CTag policies

DSCPs

Show Suggested Answer

Suggested Answer: D

by Vonda at Mar 24, 2025, 08:49 PM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pete

13 days ago

That's a good point, SCPs do provide organization-wide control. But S3 bucket policies can also be used to restrict specific actions on buckets.

upvoted 0 times

...

Sarah

13 days ago

Have you tried turning it off and on again? Just kidding! But seriously, D) SCPs are the way to go. It's like a magic 'no-delete' button for your entire AWS organization. Genius!

upvoted 0 times

...

24 days ago

D) SCPs all the way! Deleting buckets across multiple accounts? That's like trying to herd cats, but with SCPs, you can wrangle those felines like a pro!

upvoted 0 times

Ahmad

4 days ago

B) S3 bucket policies

upvoted 0 times

...

Ligia

14 days ago

A) Permissions boundaries in AWS Identity and Access Management (IAM)

upvoted 0 times

...

Pete

27 days ago

I think the answer is B) S3 bucket policies.

upvoted 0 times

...