Câu 62: AWS Certified SysOps Administrator - Associate (SOA-C02)(New)

A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts. What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?

1. A. Add the accounts to an organizational unit (OU). Apply the SCPs to the OU. — đáp án hiện tại
2. B. Add the accounts to resource groups in AWS Resource Groups. Apply the SCPs to the resource groups.
3. C. Apply the SCPs to each developer account
4. D. Enroll the accounts with AWS Control Tower. Apply the SCPs to the AWS Control Tower management account.