A SysOps administrator is configuring a monthly AWS budget for a data processing account to prevent cost overruns. The administrator wants to configure a budget action to automatically stop a specific Amazon RDS DB instance if the actual monthly spend exceeds . Which of the following configurations are required to implement this budget action? (Select TWO.)
- Create an IAM role with a trust policy that allows the AWS Budgets service principal (budgets.amazonaws.com) to assume the role, and attach an identity-based policy allowing rds:StopDBInstance permissions.Cevap
- Grant the iam:PassRole permission for the execution role to the SysOps administrator who creates the budget action.Cevap
- CCreate an AWS Cost Anomaly Detection monitor with a threshold of and configure a subscription to trigger an AWS Lambda function to stop the RDS instance.
- DConfigure an Amazon CloudWatch billing alarm for EstimatedCharges that directly stops the Amazon RDS instance when the threshold is reached.
- EDefine a Service Control Policy (SCP) at the AWS Organizations root that denies rds:StartDBInstance when the budget limit is breached.
Cevap
Creating an IAM role with a trust policy that allows the AWS Budgets service principal to assume the role with the necessary RDS permissions, and granting the SysOps administrator the permission to pass that role.
To configure an AWS Budgets action that stops an RDS instance, you must create an IAM execution role that the AWS Budgets service principal (budgets.amazonaws.com) can assume. This role requires the rds:StopDBInstance permission. Additionally, the administrator who configures the budget action must have the iam:PassRole permission to pass this execution role to the AWS Budgets service.
Adım Adım Çözüm
Anahtar Kavram
AWS Budgets Actions configuration, specifically the IAM role trust policy and PassRole requirements for automated instance stop actions.
Tahmini Süre:2m 0s