Examkin

Soru

Zorluk: OrtaAWS Budgets and Cost Alerts

A SysOps administrator is managing an AWS account for a project team that has a strict monthly spending limit of 10,00010,000. The administrator must set up a mechanism that alerts the team via email when the forecasted monthly spend is projected to exceed the budget. Additionally, if the actual spend reaches 100%100\% of the limit, the mechanism must automatically restrict the team's ability to launch new resources by applying a restrictive IAM policy to their development group. Which AWS service and configuration should the administrator use to meet these requirements with the least operational overhead?

  1. Create a monthly cost budget of 10,00010,000 in AWS Budgets. Add an alert rule for when the forecasted spend exceeds 100%100\% of the budget to send an email notification. Add an AWS Budgets Action triggered when actual spend reaches 100%100\% that attaches the restrictive IAM policy to the target group, using a custom IAM execution role that allows the budgets.amazonaws.com service principal to assume it.Cevap
  2. B
    Create an Amazon CloudWatch billing alarm with a threshold of 10,00010,000 based on the EstimatedCharges metric. Configure the alarm to send an email notification via Amazon SNS and use a built-in CloudWatch alarm action to automatically attach the restrictive IAM policy to the IAM group when the alarm enters the ALARM state.
  3. C
    Create an AWS Cost Anomaly Detection monitor for the account. Set up an anomaly subscription with a threshold of 10,00010,000 to send email alerts, and configure the monitor to automatically apply the restrictive IAM policy to the IAM group when an anomaly is detected.
  4. D
    Create a monthly cost budget of 10,00010,000 in AWS Budgets. Add an alert rule for forecasted spend to send an email. Add an AWS Budgets Action to attach the IAM policy to the group, but do not assign a custom IAM execution role, relying on the default AWS Budgets service-linked role to perform the policy attachment.

Cevap

Create a monthly cost budget of 10,00010,000 in AWS Budgets, configure a forecasted spend alert for email notification, and use AWS Budgets Actions to attach the restrictive IAM policy using a custom IAM execution role.
AWS Budgets is the correct tool because it allows tracking costs against a static monthly threshold (10,00010,000) and supports alerts based on forecasted spend. It also natively supports AWS Budgets Actions, which can execute automated tasks such as attaching a restrictive IAM policy to an IAM group. This action requires a custom IAM execution role that grants the AWS Budgets service principal permission to assume it.

Adım Adım Çözüm

1
Create a monthly cost budget with a limit of 10,00010,000 in AWS Budgets.
Establishes the budget baseline for monitoring the project's monthly spend.
AWS Budgets is the standard tool for setting custom budgets that track actual or forecasted costs.
2
Create an alert threshold in the budget configured at 100%100\% of forecasted spend.
Triggers an email notification if the monthly cost projection exceeds 10,00010,000.
Forecasted spend alerts provide early warnings before the actual budget limit is breached.
3
Define an AWS Budgets Action triggered at 100%100\% of actual spend, selecting the IAM policy action type to target the development group, and associate it with a custom IAM execution role.
Automatically attaches the restrictive IAM policy to the development group when the actual budget limit is reached.
AWS Budgets Actions natively support applying IAM policies to restrict permissions, but require a custom execution role with a trust policy allowing the budgets.amazonaws.com service principal to assume it.

Anahtar Kavram

AWS Budgets and Cost Alerts
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

AWS Budgets and Cost Alerts

Bu konudan daha fazla soru