A company uses AWS Organizations and wants some accounts to operate with separate budgets. The company needs alerts and automatic prevention of provisioning additional resources on AWS accounts when a budget threshold is reached during a specific period. Which combination of solutions will meet these requirements? (Choose three.)
Choose an answer
Tap an option to check your answer.
Correct answer: Use AWS Budgets to create a budget. Set the budget amount under the Billing dashboards of the required AWS accounts., Create an IAM role for AWS Budgets to run budget actions with the required permissions., Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate service control policy (SCP) to prevent provisioning of additional resources..
Why this is the answer
AWS Budgets is the correct service for creating budgets and setting thresholds. Budgets are configured within the Billing dashboard, not the Cost and Usage Reports section. For AWS Budgets to perform actions like preventing resource provisioning, it needs permissions, which are best granted through an IAM role, as roles are designed for services to assume. An IAM user is for human or application access, not for AWS services to assume. To automatically prevent resource provisioning when a budget threshold is met, a budget action should be configured to invoke a Service Control Policy (SCP). SCPs are features of AWS Organizations that allow centralized control over the maximum available permissions for all accounts in an organization, effectively preventing resource creation. Config Rules are for evaluating resource compliance, not for preventing provisioning based on budget thresholds.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed