A company acquired another company whose AWS accounts are standalone. The acquiring company manages accounts with AWS Organizations and wants to consolidate administration of all accounts while keeping full administrative control and centralizing security findings across all accounts. Which combination of actions should the DevOps team take? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: Invite the acquired company's AWS accounts to join the organization, create the OrganizationAccountAccessRole in each invited account, and allow the management account to assume that role., Use AWS Security Hub to aggregate and group findings across accounts, and configure Security Hub to automatically detect newly added accounts in the organization..
Why this is the answer
To consolidate administration, the acquiring company should invite the acquired company's AWS accounts to join their existing AWS Organization. Once joined, the OrganizationAccountAccessRole is automatically created in each new member account, allowing the management account to assume this role and gain administrative access. This provides centralized control without requiring individual credentials for each account. For centralized security findings, AWS Security Hub is the appropriate service. It aggregates security findings from various AWS services and partner products across all accounts in an organization. Enabling automatic detection of newly added accounts ensures that all future accounts are included in the security monitoring. AWS Firewall Manager is for centralizing firewall rule management, not security findings aggregation. Amazon Inspector is for vulnerability management within individual accounts, not for aggregating findings across an organization in the same way Security Hub does. Creating a Service Control Policy (SCP) that grants full administrative privileges and attaching it to the management account is unnecessary and potentially insecure, as the OrganizationAccountAccessRole already provides the necessary administrative access.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed