Control Tower Security Features Quiz

What you'll be asked

1. What is the primary purpose of AWS Control Tower in a multi-account environment?
2. Which feature of AWS Control Tower is used to ensure that all accounts in your organization comply with specific security policies and compliance requirements?
3. When using Control Tower, what is the best practice for managing user access across multiple accounts?
4. An administrator needs to prevent the creation of IAM users in specific member accounts to enforce the use of IAM Identity Center. Which type of Guardrail should they enable?
5. You are auditing a Control Tower environment and notice that an account in an Organizational Unit (OU) has drifted from the enforced baseline. What is the standard process to resolve this?

Answers and explanations come after you submit.