nerdexam
Amazon

SAP-C02 · Question #706

A company has multiple lines of business (LOBs) that roll up to the parent company. The company has asked its solutions architect to develop a solution with the following requirements: - Produce a…

The correct answer is B. Use AWS Organizations to create a single organization in the parent account. Then, invite each D. Create an SCP that allows only approved services and features, then apply the policy to the LOB. Consolidate billing, break out costs by LOB account, restrict services/features per governance, and grant full admin to LOB accounts within those restrictions.

Submitted by chen.hong· Mar 6, 2026Design Solutions for Organizational Complexity

Question

A company has multiple lines of business (LOBs) that roll up to the parent company. The company has asked its solutions architect to develop a solution with the following requirements:

  • Produce a single AWS invoice for all of the AWS accounts used by its

LOBs.

  • The costs for each LOB account should be broken out on the invoice.
  • Provide the ability to restrict services and features in the LOB

accounts, as defined by the company's governance policy.

  • Each LOB account should be delegated full administrator permissions,

regardless of the governance policy. Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

Options

  • AUse AWS Organizations to create an organization in the parent account for each LOB. Then
  • BUse AWS Organizations to create a single organization in the parent account. Then, invite each
  • CImplement service quotas to define the services and features that are permitted and apply the
  • DCreate an SCP that allows only approved services and features, then apply the policy to the LOB
  • EEnable consolidated billing in the parent account's billing console and link the LOB accounts.

How the community answered

(58 responses)
  • A
    10% (6)
  • B
    62% (36)
  • C
    5% (3)
  • E
    22% (13)

Why each option

Consolidate billing, break out costs by LOB account, restrict services/features per governance, and grant full admin to LOB accounts within those restrictions.

AUse AWS Organizations to create an organization in the parent account for each LOB. Then

Creating a separate organization for each LOB would prevent consolidated billing across all LOBs and result in multiple invoices, contradicting the requirement for a single invoice.

BUse AWS Organizations to create a single organization in the parent account. Then, invite eachCorrect

Creating a single organization in the parent account and inviting each LOB account enables consolidated billing and allows for centralized management and application of policies across all accounts, addressing the single invoice and cost breakdown requirements.

CImplement service quotas to define the services and features that are permitted and apply the

Service quotas (limits) restrict resource creation at a usage level, not at a policy level for enabling/disabling services or features, and are not the primary tool for implementing governance policies on what services are permitted.

DCreate an SCP that allows only approved services and features, then apply the policy to the LOBCorrect

Creating an Service Control Policy (SCP) that allows only approved services and features and applying it to the LOB organizational units (OUs) or accounts restricts what LOB accounts can provision, even if they have full administrator permissions within their account, thus enforcing governance.

EEnable consolidated billing in the parent account's billing console and link the LOB accounts.

While enabling consolidated billing is part of the solution, merely linking accounts through consolidated billing does not provide the capability to restrict services and features based on governance policies; AWS Organizations is needed for that.

Concept tested: AWS Organizations for consolidated billing and SCPs for governance

Source: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_consolidate.html AND https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice