Play free

Security World 2 · Guardrails Above · Stage 3

Landing Zone

Three kinds of control, one administrator per security service, and root credentials nobody needs to hold.

  • AWS Control Tower
  • Control kinds
  • Delegated administrators
  • Centralized root access
  • Break-glass
Domain
Security
World
Security World 2: Guardrails Above (Professional)
Game type
Organization tree: Set controls on an organization's tree and read each account's verdict.
Time
About 30 minutes on a first attempt (estimated)
Exam guides
  • SAP-C02Task 1.4: Design a multi-account AWS environment
  • DOP-C02Task 2.2: Deploy automation to create, onboard, and secure AWS accounts in a multi-account or multi-Region environment
  • SCS-C03Skill 6.1.2: Implement and manage AWS Control Tower in new and existing environments, and deploy optional and custom controls; Skill 6.1.4: Centrally manage security services (for example, delegated administrator accounts); Skill 6.1.5: Manage AWS account root user credentials (for example, by centralizing root access for member accounts, managing MFA, designing break-glass procedures)