SAP-C02 · Question #16
SAP-C02 Question #16: Real Exam Question with Answer & Explanation
The correct answer is A: Create an AWS Config rule in each account to find resources with missing tags.. https://docs.aws.amazon.com/config/latest/developerguide/config-rule-multi-account- https://docs.aws.amazon.com/config/latest/developerguide/aggregate-data.html https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examp les_tagging.html
Question
A company is developing and hosting several projects in the AWS Cloud. The projects are developed across multiple AWS accounts under the same organization in AWS Organizations. The company requires the cost lor cloud infrastructure to be allocated to the owning project. The team responsible for all of the AWS accounts has discovered that several Amazon EC2 instances are lacking the Project tag used for cost allocation. Which actions should a solutions architect take to resolve the problem and prevent it from happening in the future? (Choose three.)
Options
- ACreate an AWS Config rule in each account to find resources with missing tags.
- BCreate an SCP in the organization with a deny action for ec2:Runlnstances if the Project tag is
- CUse Amazon Inspector in the organization to find resources with missing tags.
- DCreate an IAM policy in each account with a deny action for ec2:RunInstances if the Project tag is
- ECreate an AWS Config aggregator for the organization to collect a list of EC2 instances with the
- FUse AWS Security Hub to aggregate a list of EC2 instances with the missing Project tag.
Explanation
https://docs.aws.amazon.com/config/latest/developerguide/config-rule-multi-account- https://docs.aws.amazon.com/config/latest/developerguide/aggregate-data.html https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examp les_tagging.html
Community Discussion
No community discussion yet for this question.