AWS Organizations Security Quiz

What you'll be asked

1. What is the primary purpose of an AWS Organizations Service Control Policy (SCP)?
2. You need to prevent member accounts in your organization from leaving the organization without administrative approval. Which feature should you use?
3. Which AWS service, when integrated with AWS Organizations, allows you to centrally manage and deploy security policies across all accounts in your organization?
4. When using AWS Organizations, what is the best practice for managing the root user of the management account?
5. An SCP is applied to an Organizational Unit (OU) with a 'Deny' effect on 's3:*'. A user in an account within that OU has an IAM policy that explicitly allows 's3:ListBucket'. What is the effective permission for that user?

Answers and explanations come after you submit.