AWS Certified Solutions Architect – Professional (SAP-C02) — Question 105

A retail company has structured its AWS accounts to be part of an organization in AWS Organizations. The company has set up consolidated billing and has mapped its departments to the following OUs: Finance, Sales, Human Resources (HR), Marketing, and Operations. Each OU has multiple AWS accounts, one for each environment within a department. These environments are development, test, pre-production, and production.

The HR department is releasing a new system that will launch in 3 months. In preparation, the HR department has purchased several Reserved Instances (RIs) in its production AWS account. The HR department will install the new application on this account. The HR department wants to make sure that other departments cannot share the RI discounts.

Which solution will meet these requirements?

Answer options

• A. In the AWS Billing and Cost Management console for the HR department's production account turn off RI sharing.
• B. Remove the HR department's production AWS account from the organization. Add the account 10 the consolidating billing configuration only.
• C. In the AWS Billing and Cost Management console. use the organization’s management account 10 turn off RI Sharing for the HR departments production AWS account.
• D. Create an SCP in the organization to restrict access to the RIs. Apply the SCP to the OUs of the other departments.

Correct answer: C

Explanation

The correct answer, C, allows the management account to control the sharing of Reserved Instances specifically for the HR department's production account, ensuring that other departments cannot access their RI discounts. Option A only addresses the HR account without utilizing the management account, while option B completely removes the account from the organization, which is not necessary. Option D would limit access but does not directly disable RI sharing, making it less effective for this specific requirement.