A Large Company Is Using AWS Organizations to Manage Its

Multiple Choice

A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account. The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the permissions and add a bucket policy to the S3 bucket. Which parameters should be specified to accomplish this in the MOST efficient manner?

A) Specify "*" as the principal and PrincipalOrgId as a condition.
B) Specify all account numbers as the principal.
C) Specify PrincipalOrgId as the principal.
D) Specify the organization's master account as the principal.