Quick Answer
The answer is AWS Organizations, the native service designed for multi-account management. This service enables centralized governance by allowing you to create a hierarchical structure of accounts with organizational units (OUs) and apply service control policies (SCPs) to enforce permissions boundaries across all accounts, directly addressing the need for better isolation and consolidated billing. On the AWS Certified Solutions Architect Professional SAP-C02 exam, this concept often appears in scenario-based questions where you must choose the service that provides policy-based management across multiple accounts, with a common trap being to select AWS Control Tower instead—remember that Control Tower orchestrates Organizations but does not replace it. A useful memory tip is to think of Organizations as the "root" of your multi-account tree, where SCPs act like guardrails that cannot be overridden by account-level permissions.
This SAP-C02 practice question tests your understanding of design solutions for organizational complexity. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company has a single AWS account and wants to implement a multi-account strategy for better isolation. Which AWS service is designed to help centrally manage multiple accounts?
AWS IAM
Why wrong: IAM manages users and permissions, not accounts.
AWS Organizations
Organizations allows you to centrally manage multiple accounts.
AWS Control Tower
Why wrong: Control Tower builds on Organizations but is not the foundational service.
AWS Service Catalog
Why wrong: Service Catalog is for managing IT service portfolios.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
AWS Organizations
AWS Organizations is the native AWS service designed to centrally manage multiple AWS accounts. It allows you to create a hierarchy of accounts with organizational units (OUs), apply service control policies (SCPs) for governance, and consolidate billing. This directly addresses the need for a multi-account strategy with centralized management.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
AWS IAM
Why it's wrong here
IAM manages users and permissions, not accounts.
AWS Organizations
Why this is correct
Organizations allows you to centrally manage multiple accounts.
Related concept
Read the scenario before looking for a memorised answer.
AWS Control Tower
Why it's wrong here
Control Tower builds on Organizations but is not the foundational service.
AWS Service Catalog
Why it's wrong here
Service Catalog is for managing IT service portfolios.
Common exam traps
The trap here is that candidates often confuse AWS Control Tower (a managed landing zone service) with AWS Organizations (the underlying account management service), but Control Tower relies on Organizations and is not the service designed for direct central management of multiple accounts.
Detailed technical explanation
AWS Organizations uses the AWS Organizations API to create and manage accounts, and it enforces SCPs at the root, OU, or account level. SCPs are JSON-based policies that define maximum permissions, effectively acting as a guardrail across all member accounts. A subtle behavior is that SCPs do not grant permissions—they only restrict what IAM policies can allow, so a root user in a member account can still be blocked by an SCP.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
A startup's cloud architect reviews their monthly bill and notices costs are higher than expected for a long-running batch job. Switching from on-demand instances to Reserved Instances — or using Spot/Preemptible VMs — can reduce compute costs by up to 72 %. Questions like this test whether you understand the tradeoffs between commitment, flexibility, and cost across cloud pricing models.
What to study next
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Design Solutions for Organizational Complexity — study guide chapter
Learn the concepts, then practise the questions
Design Solutions for Organizational Complexity practice questions
Targeted practice on this topic area only
All SAP-C02 questions
1,746 questions across all exam domains
AWS Certified Solutions Architect Professional SAP-C02 study guide
Full concept coverage aligned to exam objectives
SAP-C02 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise SAP-C02 questions linked to Design Solutions for Organizational Complexity.
Practise SAP-C02 questions linked to Design for New Solutions.
Practise SAP-C02 questions linked to Continuous Improvement for Existing Solutions.
Practise SAP-C02 questions linked to Accelerate Workload Migration and Modernization.
Practise SAP-C02 questions linked to SAA-C03 VPC.
Practise SAP-C02 questions linked to SAA-C03 S3 lifecycle policy questions.
Practise SAP-C02 questions linked to SAA-C03 RDS Multi-AZ questions.
Practise SAP-C02 questions linked to SAA-C03 IAM policy.
Practise SAP-C02 questions linked to SAA-C03 Route 53 failover questions.
Practise SAP-C02 questions linked to SAA-C03 CloudFront.
Practise SAP-C02 questions linked to SAA-C03 NAT gateway questions.
Practise SAP-C02 questions linked to SAA-C03 VPC endpoint questions.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Design Solutions for Organizational Complexity — This question tests Design Solutions for Organizational Complexity — Read the scenario before looking for a memorised answer..
The correct answer is: AWS Organizations — AWS Organizations is the native AWS service designed to centrally manage multiple AWS accounts. It allows you to create a hierarchy of accounts with organizational units (OUs), apply service control policies (SCPs) for governance, and consolidate billing. This directly addresses the need for a multi-account strategy with centralized management.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company is migrating to AWS and plans to use a multi-account strategy. The management account will be used solely for administrative purposes. Which best practice should be followed when setting up AWS Organizations?
easyWhy C: Option C is correct because the management account should have limited access and be reserved for organization management tasks. Option A is wrong because enabling all services in the management account increases risk. Option B is wrong because the management account cannot be used as a payer account if it is also used for production. Option D is wrong because the management account should not be used for development.
Last reviewed: Jun 24, 2026
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.