Examkin

Soru

Zorluk: KolayAWS Budgets and Cost Alerts

A SysOps administrator is setting up a monthly cost budget in AWS Budgets. The administrator wants to use AWS Budgets Actions to automatically apply a restrictive IAM policy to a developer group if the actual monthly spend exceeds a specific threshold.

Which of the following are required to successfully configure and run this budget action? (Select TWO.)

  1. An IAM role that grants the AWS Budgets service principal permission to run the action and apply the policyCevap
  2. A budget action configured in AWS Budgets that specifies the action threshold, the target group, and the IAM policy to applyCevap
  3. C
    An Amazon CloudWatch billing alarm configured to trigger an AWS Lambda function that modifies the group permissions
  4. D
    An active AWS Cost Anomaly Detection monitor to track spending spikes and execute the policy action

Cevap

To configure the AWS Budgets Action, the administrator must create an IAM role that trusts the AWS Budgets service principal and has permissions to apply the policy, and configure the budget action within AWS Budgets to define the threshold, target group, and policy.
The correct requirements are creating an IAM role that trusts the AWS Budgets service principal and configuring the budget action directly inside AWS Budgets. This allows the AWS Budgets service to securely assume the role and apply the restrictive policy to the developer group when the cost threshold is crossed.

Adım Adım Çözüm

1
Identify the service executing the action.
AWS Budgets executes the policy application directly.
Since the action is run by the AWS Budgets service, it requires permissions to modify IAM resources.
2
Determine the required IAM configuration.
Create an IAM role that has a trust policy allowing 'budgets.amazonaws.com' to assume it, along with permissions like attaching group policies.
AWS Budgets must assume this role to modify the target developer group's permissions.
3
Determine the required budget configuration.
Define the budget action and its threshold directly in the AWS Budgets console or API.
The action must be linked to the budget threshold so that it triggers automatically when the cost is exceeded.

Anahtar Kavram

AWS Budgets Actions allow SysOps administrators to configure automated responses (such as applying IAM policies, Service Control Policies, or stopping EC2/RDS instances) when a cost or usage budget threshold is met. This requires configuring the action in AWS Budgets and providing an IAM role that the AWS Budgets service principal can assume to execute the action.
Bu soruyu puanla

Konular

AWS Budgets and Cost Alerts

Bu konudan daha fazla soru