Question 3 of 80
Single answerWhich solution meets these requirements with the LEAST amount of operational overhead?
✓AAdd the aws PrincipalOrgID global condition key with a reference to the organization ID to the S3 bucket policy.
BCreate an organizational unit (OU) for each department. Add the aws:PrincipalOrgPaths global condition key to the S3 bucket policy.
CUse AWS CloudTrail to monitor the CreateAccount, InviteAccountToOrganization, LeaveOrganization, and RemoveAccountFromOrganization events. Update the S3 bucket policy accordingly.
DTag each user that needs access to the S3 bucket. Add the aws:PrincipalTag global condition key to the S3 bucket policy.
✓
Correct Answer: A
Add the aws PrincipalOrgID global condition key with a reference to the organization ID to the S3 bucket policy.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of AWS certification topics.