A DevOps Engineer must ensure all IAM entity configurations across multiple AWS accounts in AWS Organizations are compliant with corporate IAM policies. Which combination of steps will accomplish this? (Choose two.)
A) Enable AWS Trusted Advisor in Organizations for all accounts to report on noncompliant IAM entities.
B) Configure an AWS Config aggregator in the Organizations master account for all accounts.
C) Deploy AWS Config rules to the master account in Organizations that match corporate IAM policies.
D) Apply an SCP in Organizations to ensure compliance of IAM entities.
E) Deploy AWS Config rules to all accounts in Organizations that match the corporate IAM policies.

Question

Quizplus · Accepted Answer

AWS Config rules can be deployed to the master account in Organizations to match corporate IAM policies (C), but this will only check compliance in the master account. To check compliance in all accounts, AWS Config rules must be deployed to all accounts in Organizations (E). Additionally, an SCP can be applied in Organizations to ensure compliance of IAM entities (D).

A DevOps Engineer Must Ensure All IAM Entity Configurations Across