Table of Contents
Question
A company is defining its AWS multi-account strategy. The company needs to control access to AWS services and needs to consolidate billing across accounts. Which AWS service should the company use to meet these requirements?
A. AWS Organizations
B. AWS Identity and Access Management (IAM)
C. AWS Billing and Cost Management
D. Amazon Cognito
Answer
A. AWS Organizations
Explanation
The correct answer is: A. AWS Organizations
AWS Organizations is the AWS service that the company should use to meet the requirements of controlling access to AWS services and consolidating billing across accounts.
AWS Organizations provides a central way to manage multiple AWS accounts within your organization and helps you apply policies across those accounts. Here’s how it addresses the specified requirements:
- Access Control: AWS Organizations allows you to create service control policies (SCPs) that define the permissions for AWS services and actions within each account. This means you can control what services and actions are allowed or denied across all linked accounts.
- Consolidated Billing: With AWS Organizations, you can consolidate billing across all linked accounts under a single master account. This makes it easier to manage and understand your AWS costs by providing a single bill and payment method for all accounts.
Comparing the other options:
- B. AWS Identity and Access Management (IAM): IAM is used for managing access to AWS resources within a single account. While it’s essential for security, it doesn’t provide the hierarchical account management or consolidated billing capabilities needed in a multi-account strategy.
- C. AWS Billing and Cost Management: This service helps you understand and manage your AWS costs, including budgeting, tracking, and cost optimization. While it can help with consolidated billing, it does not provide the access control and hierarchical organization features that AWS Organizations offers.
- D. Amazon Cognito: Amazon Cognito is used for managing user identities and authentication in applications. It’s not specifically designed for multi-account management, access control, or consolidated billing.
In summary, AWS Organizations is the correct choice for the company to control access to AWS services and consolidate billing across accounts as part of its multi-account strategy.
Amazon AWS Certified Cloud Practitioner CLF-C02 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Amazon AWS Certified Cloud Practitioner CLF-C02 exam and earn Amazon AWS Certified Cloud Practitioner CLF-C02 certification.