A company uses an organization in AWS Organizations to manage its AWS accounts. The company recently acquired another company that has standalone AWS…

The correct answer is B and C. Option B is correct because inviting the acquired company’s AWS

accounts to join the organization and creating the OrganizationAccountAccessRole IAM role in the

invited accounts allows the management account to assume the role and gain full administrative

access to the member accounts. Option C is correct because using AWS Security Hub to collect and

group findings across all accounts enables the DevOps team to monitor and improve the security

posture of the organization. Security Hub can automatically detect new accounts as the accounts are

added to the organization and enable Security Hub for them. Option A is incorrect because creating

an SCP that has full administrative privileges and attaching it to the management account does not

grant the management account access to the member accounts. SCPs are used to restrict the

permissions of the member accounts, not to grant permissions to the management account. Option

D is incorrect because using AWS Firewall Manager to collect and group findings across all accounts is

not a valid use case for Firewall Manager. Firewall Manager is used to centrally configure and

manage firewall rules across the organization, not to collect and group security findings. Option E is

incorrect because using Amazon Inspector to collect and group findings across all accounts is not a

valid use case for Amazon Inspector. Amazon Inspector is used to assess the security and compliance

of applications running on Amazon EC2 instances, not to collect and group security findings across

accounts. Reference:

Inviting an AWS account to join your organization

Enabling and disabling AWS Security Hub

Service control policies

AWS Firewall Manager

Amazon Inspector