A media company is migrating several independent business units to AWS. The company wants to centrally manage billing to receive a single invoice and automatically benefit from volume pricing discounts by combining usage. Additionally, the security department must establish permission guardrails to restrict access to unauthorized AWS services for all accounts.
Which two features or capabilities of AWS Organizations will allow the company to meet these requirements? (Select TWO.)
- Consolidated billing to aggregate usage across all accounts and qualify for volume tier discounts.Answer
- Service Control Policies (SCPs) to specify the maximum available permissions for member accounts.Answer
- CAWS Identity and Access Management (IAM) groups to centrally enforce user permissions across all accounts.
- DAWS Budgets to automatically disable access to specific AWS services when cost thresholds are exceeded.
- EAWS Support Plan sharing to automatically upgrade all member accounts to the Enterprise Support tier under a single subscription fee.
Answer
The correct options are consolidated billing (which aggregates usage to qualify for volume discounts) and Service Control Policies (which define permission guardrails for member accounts).
Consolidated billing combines the usage of all member accounts in an organization to qualify for volume discounts, while also generating a single invoice. Service Control Policies (SCPs) specify the maximum permissions for member accounts, allowing security teams to restrict access to unauthorized AWS services.
Step-by-Step Solution
Key Concept
Centralized governance and billing using AWS Organizations features, specifically Consolidated Billing and Service Control Policies (SCPs).