SOA-C02 · Question #734
A company uses AWS Organizations to manage its AWS accounts. The company is implementing a CostCenter tag for business units to track costs and prevent noncompliant actions. The company needs to…
The correct answer is A. Create a service control policy (SCP) for the CostCenter tag in Organizations. Define the specified. An SCP can require ec2:RunInstances requests to include CostCenter with allowed values by using aws:RequestTag/CostCenter and aws:TagKeys conditions. Attached at the OU level, it blocks noncompliant launches across all accounts with minimal admin effort.
Question
A company uses AWS Organizations to manage its AWS accounts. The company is implementing a CostCenter tag for business units to track costs and prevent noncompliant actions. The company needs to prevent users from launching Amazon EC2 instances with a CostCenter tag unless the tag has specified values. Which solution will meet this requirement with the LEAST administrative effort?
Options
- ACreate a service control policy (SCP) for the CostCenter tag in Organizations. Define the specified
- BConfigure inventory collection for the EC2 instances in AWS Systems Manager Inventory. Attach
- CCreate an Amazon Machine Image (AMI) for each of the company's business units. Include a user
- DCreate an Amazon EventBridge rule that invokes an AWS Lambda function when a user launches
How the community answered
(41 responses)- A78% (32)
- B2% (1)
- C15% (6)
- D5% (2)
Explanation
An SCP can require ec2:RunInstances requests to include CostCenter with allowed values by using aws:RequestTag/CostCenter and aws:TagKeys conditions. Attached at the OU level, it blocks noncompliant launches across all accounts with minimal admin effort.
Topics
Community Discussion
No community discussion yet for this question.