AWS Certified Solutions Architect – Professional (SAP-C02) — Question 526

A company that has multiple business units is using AWS Organizations with all features enabled. The company has implemented an account structure in which each business unit has its own AWS account. Administrators in each AWS account need to view detailed cost and utilization data for their account by using Amazon Athena.

Each business unit can have access to only its own cost and utilization data. The IAM policies that govern the ability to set up AWS Cost and Usage Reports are in place. A central Cost and Usage Report that contains all data for the organization is already available in an Amazon S3 bucket.

Which solution will meet these requirements with the LEAST operational complexity?

Answer options

• A. In the organization's management account, use AWS Resource Access Manager (AWS RAM) to share the Cost and Usage Report data with each member account.
• B. In the organization's management account, configure an S3 event to invoke an AWS Lambda function each time a new file arrives in the S3 bucket that contains the central Cost and Usage Report. Configure the Lambda function to extract each member account’s data and to place the data in Amazon S3 under a separate prefix. Modify the S3 bucket policy to allow each member account to access its own prefix.
• C. In each member account, access AWS Cost Explorer. Create a new report that contains relevant cost information for the account. Save the report in Cost Explorer. Provide instructions that the account administrators can use to access the saved report.
• D. In each member account, create a new S3 bucket to store Cost and Usage Report data. Set up a Cost and Usage Report to deliver the data to the new S3 bucket.

Correct answer: B

Explanation

Option B is correct because using a Lambda function to split the centralized CUR into account-specific S3 prefixes allows individual accounts to query only their data using Amazon Athena with minimal administrative overhead. Option A is incorrect because AWS RAM does not support sharing S3 bucket objects or CUR data directly. Options C and D are incorrect because Cost Explorer does not integrate with Amazon Athena, and setting up individual CURs in every member account introduces significant operational complexity compared to leveraging the existing central report.