Amazon Exam SCS-C02 Topic 2 Question 43 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 43
Topic #: 2

A healthcare company has multiple AWS accounts in an organization in AWS Organizations. The company uses Amazon S3 buckets to store sensitive information of patients. The company needs to restrict users from deleting any S3 bucket across the organization.

What is the MOST scalable solution that meets these requirements?

APermissions boundaries in AWS Identity and Access Management (1AM)

BS3 bucket policies

CTag policies

DSCPs

Show Suggested Answer

Suggested Answer: D

by Vonda at Mar 24, 2025, 08:49 PM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pete

4 days ago

That's a good point, SCPs do provide organization-wide control. But S3 bucket policies can also be used to restrict specific actions on buckets.

upvoted 0 times

...

Sarah

4 days ago

Have you tried turning it off and on again? Just kidding! But seriously, D) SCPs are the way to go. It's like a magic 'no-delete' button for your entire AWS organization. Genius!

upvoted 0 times

...

Octavio

9 days ago

D) SCPs, baby! It's like having a personal bodyguard for your S3 buckets. No more 'Oops, I deleted the entire company's sensitive data' moments. Boom, problem solved!

upvoted 0 times

...

Luis

10 days ago

A) Permissions boundaries? Pfft, that's so last year. D) SCPs are where it's at - simple, scalable, and you can even use them to block access to the snack machine, if you're feeling extra sassy.

upvoted 0 times

...

Hoa

12 days ago

I disagree, I believe the answer is D) SCPs because they can be applied at the organization level.

upvoted 0 times

...

Lanie

13 days ago

I dunno, B) S3 bucket policies sound like a lot of work. Who's got time for that when you can just let D) SCPs do the heavy lifting?

upvoted 0 times

...

Delbert

15 days ago

D) SCPs all the way! Deleting buckets across multiple accounts? That's like trying to herd cats, but with SCPs, you can wrangle those felines like a pro!

upvoted 0 times

Ligia

5 days ago

A) Permissions boundaries in AWS Identity and Access Management (IAM)

upvoted 0 times

...

Pete

18 days ago

I think the answer is B) S3 bucket policies.

upvoted 0 times

...