Soru

Zorluk: OrtaConsolidated Billing and AWS Organizations

A gaming studio is launching several multiplayer games, with each game development team operating in its own AWS account. The studio's finance team wants to consolidate billing to streamline payments and optimize costs, while the security team needs to enforce security baselines across all accounts. Which TWO statements correctly describe the behavior or features of AWS Organizations and consolidated billing in this scenario? (Select TWO.)

  1. The usage of all member accounts is aggregated on a single monthly invoice, allowing the studio to benefit from volume-based pricing discounts across services like Amazon S3.Cevap
  2. Service Control Policies (SCPs) can be applied to restrict which AWS services and actions can be accessed by the individual game development accounts.Cevap
  3. C
    Service Control Policies (SCPs) can be used to grant additional permissions directly to IAM users and roles in the member accounts.
  4. D
    Consolidating the accounts enables the gaming studio to capitalize its monthly AWS operational expenditures (OpEx) into long-term capital assets (CapEx).
  5. E
    The AWS Free Tier benefits of each individual member account are pooled together, multiplying the total free tier limits available to the organization.

Cevap

The usage of all member accounts is aggregated on a single monthly invoice to qualify for volume discounts, and Service Control Policies (SCPs) are used to restrict the maximum permissions of the member accounts.
The correct options are the ones stating that usage is aggregated on a single invoice to receive volume pricing discounts and that Service Control Policies (SCPs) can be used to restrict services and actions. Consolidated billing aggregates S3 and other usage across all member accounts to calculate volume discounts. SCPs act as central permission guardrails for member accounts.

Adım Adım Çözüm

1
Analyze the billing requirements for consolidated accounts.
Usage across all accounts (such as Amazon S3 storage) is combined on a single invoice, allowing the organization to qualify for volume-pricing discounts as a single entity.
AWS treats all accounts in an organization as a single account for billing purposes, aggregating usage to reach volume tiers.
2
Analyze the security and governance requirements.
SCPs can be applied at the root, OU, or account level to restrict maximum permissions, serving as security guardrails.
SCPs set permission boundaries but do not grant permissions; they ensure member accounts do not violate security guidelines.

Anahtar Kavram

AWS Organizations consolidated billing features and Service Control Policies (SCPs) guardrails
Bu soruyu puanla