AWSSAP-C02105 cards4 domains

SAP-C02 Flashcards

Active recall study cards for the AWS Certified Solutions Architect – Professional exam. Flip each card to reveal the answer, filter by domain, or shuffle for spaced repetition.

0 / 105 cards reviewed0% done

Card 1 of 105

organizational-complexity

What do Service Control Policies (SCPs) actually do — and what do they NOT do?

Click to reveal answer

Answer

SCPs define the maximum permissions allowed for accounts and OUs in an AWS Organization — they restrict but never grant permissions. An IAM policy must also allow the action. An explicit SCP Deny overrides all Allows everywhere.

Click to flip back

Tip: Use Space to flip, ← / → to navigate

Ready for the real thing?

Take a timed SAP-C02mock exam to test what you've learned.