Member accounts must be prevented from leaving the organization or…

Question

Member accounts must be prevented from leaving the organization or disabling central security services. Which governance control should the architect apply?

Accepted Answer

Organizations SCPs that deny leaving the organization and deny disabling mandated central security services. — SCPs are the charter amendments member cities can’t quietly repeal. Deny LeaveOrganization and deny turning off the mandated security stack. Handshakes, deletable local IAM, or blog posts aren’t enforceable governance.

Answer

Verbal agreements with account owners and no enforceable policy.

Answer

IAM policies only in member accounts that administrators can delete at will.

Answer

Public blog posts describing preferred security settings without enforcing them.

Member accounts must be prevented from leaving the organization or disabling central security services. Which governance control should the architect apply?

Short Explanation

Full Explanation