AWS Certified Solutions Architect – Professional — Question 728
A company is using an organization in AWS Organizations to manage AWS accounts. For each new project, the company creates a new linked account. After the creation of a new account, the root user signs in to the new account and creates a service request to increase the service quota for Amazon EC2 instances. A solutions architect needs to automate this process.
Which solution will meet these requirements with the LEAST operational overhead?
Answer options
- A. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to detect creation of a new account. Send the event to an Amazon Simple Notification Service (Amazon SNS) topic that invokes an AWS Lambda function. Configure the Lambda function to run the request-service-quota-increase command to request a service quota increase for EC2 instances.
- B. Create a Service Quotas request template in the management account. Configure the desired service quota increases for EC2 instances.
- C. Create an AWS Config rule in the management account to set the service quota for EC2 instances. Q
- D. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to detect creation of a new account. Send the event to an Amazon Simple Notification Service (Amazon SNS) topic that invokes an AWS Lambda function. Configure the Lambda function to run the create-case command to request a service quota increase for EC2 instances.
Correct answer: B
Explanation
AWS Service Quotas features a request template that can be configured in the AWS Organizations management account to automatically request quota increases whenever a new member account is created. This native feature requires no custom code, EventBridge rules, or Lambda functions, making it the solution with the lowest operational overhead. Using AWS Config rules or custom Lambda functions to trigger API commands introduces unnecessary complexity and maintenance overhead.