AWS Certified Solutions Architect – Professional (SAP-C02) — Question 64

A company that uses AWS Organizations allows developers to experiment on AWS. As part of the landing zone that the company has deployed, developers use their company email address to request an account. The company wants to ensure that developers are not launching costly services or running services unnecessarily. The company must give developers a fixed monthly budget to limit their AWS costs.

Which combination of steps will meet these requirements? (Choose three.)

Answer options

• A. Create an SCP to set a fixed monthly account usage limit. Apply the SCP to the developer accounts.
• B. Use AWS Budgets to create a fixed monthly budget for each developer’s account as part of the account creation process.
• C. Create an SCP to deny access to costly services and components. Apply the SCP to the developer accounts.
• D. Create an IAM policy to deny access to costly services and components. Apply the IAM policy to the developer accounts.
• E. Create an AWS Budgets alert action to terminate services when the budgeted amount is reached. Configure the action to terminate all services.
• F. Create an AWS Budgets alert action to send an Amazon Simple Notification Service (Amazon SNS) notification when the budgeted amount is reached. Invoke an AWS Lambda function to terminate all services.

Correct answer: B, C, F

Explanation

Option B is correct because AWS Budgets allows setting a fixed monthly budget for each developer's account, helping control costs. Option C is also correct as creating an SCP to deny access to costly services further limits potential expenses. Option F is valid since it provides a notification mechanism and action through AWS Lambda, but options A, D, and E do not effectively implement the necessary budget controls.