Home › AWS Solutions Architect Associate › cloudcomputing › securearchitectures › Which AWS service enables an organisation to enf…
Which AWS service enables an organisation to enforce a baseline of security configuration across all member accounts as soon as they join the AWS Organization (e.g. enable CloudTrail, mandate MFA, allowed regions)?
AAmazon Comprehend
BAWS Elemental MediaLive
CAmazon Polly
DAWS Control Tower
Answer & Solution
Correct answer: D. AWS Control Tower
Control Tower sets up a multi-account landing zone with guardrails (preventive SCPs + detective Config rules) baked in. Polly is text-to-speech, MediaLive is live video, Comprehend is NLP.
Related questions
Which AWS feature lets you store and retrieve secrets (database passwords, API tokens) witWhich combination implements defense-in-depth network segmentation inside a VPC for a publA team wants short-lived credentials (15 minutes) for an external CI/CD system running OUTA workload needs to encrypt sensitive S3 objects with keys that the customer creates, rotaAn organisation needs to give a partner read-only access to one specific S3 bucket across Which AWS service is purpose-built to find and classify sensitive data (e.g. PII, credit-cWhich AWS service inspects CloudTrail / VPC flow logs / DNS query logs with ML to detect aAn organisation needs a managed L7 web application firewall to filter SQL injection and cr