[Solved] Given this AWS Organizations policy snippet, what effect does it have?{ "Effect": "Deny", "Action": "organizations:CreateAccount", "Resource": "*" } | AWS

AWS - Account and Billing

Given this AWS Organizations policy snippet, what effect does it have?

{
  "Effect": "Deny",
  "Action": "organizations:CreateAccount",
  "Resource": "*"
}

APrevents users from creating new AWS accounts in the organization

BAllows users to create new AWS accounts

CPrevents users from deleting AWS accounts

DAllows users to manage billing

Step-by-Step Solution

Solution:

Step 1: Analyze the policy effect and action
The policy has Effect 'Deny' on the action 'organizations:CreateAccount'.
Step 2: Understand the impact on permissions
This means users are denied permission to create new accounts in the organization.
Final Answer:
Prevents users from creating new AWS accounts in the organization -> Option A
Quick Check:
Deny CreateAccount = Block new account creation [OK]

Quick Trick: Deny effect blocks specified actions [OK]

Common Mistakes:

MISTAKES

Master "Account and Billing" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

Given this AWS Organizations policy snippet, what effect does it have?