AWS Certified Solutions Architect – Associate (SAA-C03) — Question 473

A company uses AWS Organizations. The company wants to operate some of its AWS accounts with different budgets. The company wants to receive alerts and automatically prevent provisioning of additional resources on AWS accounts when the allocated budget threshold is met during a specific period.

Which combination of solutions will meet these requirements? (Choose three.)

Answer options

• A. Use AWS Budgets to create a budget. Set the budget amount under the Cost and Usage Reports section of the required AWS accounts.
• B. Use AWS Budgets to create a budget. Set the budget amount under the Billing dashboards of the required AWS accounts.
• C. Create an IAM user for AWS Budgets to run budget actions with the required permissions.
• D. Create an IAM role for AWS Budgets to run budget actions with the required permissions.
• E. Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate config rule to prevent provisioning of additional resources.
• F. Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate service control policy (SCP) to prevent provisioning of additional resources.

Correct answer: B, D, F

Explanation

To configure budgets, AWS Budgets must be set up in the Billing dashboard of the target accounts, making B correct and A incorrect. To execute budget actions automatically, AWS Budgets requires an IAM role with the necessary permissions to apply restrictions, rather than an IAM user, making D correct and C incorrect. Finally, attaching a Service Control Policy (SCP) via a budget action is the correct way to restrict resource provisioning in AWS Organizations, whereas AWS Config rules are used for compliance auditing rather than enforcement, making F correct and E incorrect.