-
Consolidated Billing options appear wrong
updated 3 years ago
2 Members
·
2
Posts
-
Hi @jon,
I have pasted the question and the answers mentioned below.
But I am confused that when consolidated billing is enabled how can scp be applied without the full feature. What am I missing please?Regards,
Palash.
Question:
A retail company has several subsidiaries with offices located in different countries in Southeast Asia. Each subsidiary has an AWS account that is used for hosting the company retail website, which is customized per country. The parent company wants to have better control on all the AWS accounts as well as visibility on the costs incurred for each account. The Solutions Architect has been tasked to implement a solution that will satisfy the following requirements:
Provide a cost breakdown report for each subsidiary AWS account.
Have a single AWS invoice for all the subsidiary AWS accounts.
Provide full administration privileges on each subsidiary AWS account, regardless of the parent company’s policy.
Have the ability to restrict the services and features that can be used on each subsidiary AWS account, as defined by the parent company’s policy.
Which of the following actions should the Solutions Architect take in order to fulfill the requirements? (Select TWO.)
Correct answers mentioned are:
Define Service Control Policy (SCP) documents to only allow services and features defined by the parent company policy. Apply the necessary SCP for each subsidiary AWS account.and
Create an AWS Organization on the parent company’s AWS account and link all the subsidiary AWS accounts. On the AWS Billing and Cost Management console of the parent account, enable consolidated billing.
-
Hello Palash,
Thank you for your feedback.
But I am confused that when consolidated billing is enabled how can scp be applied without the full feature. What am I missing please?
>> I understand that when using Consolidated Billing and applying SCP to the organization requires that “All feature” on AWS Organization must be enabled.
When using AWS Organizations, enabling All features is the default. Therefore, I think that going into this question, it is safe to assume that “All feature” for AWS Organization is enabled.
Please refer to this documentation: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html
AWS Organizations has two available feature sets:
All features – This feature set is the preferred way to work with AWS Organizations, and it includes Consolidating Billing features. When you create an organization, enabling all features is the default. With all features enabled, you can use the advanced account management features available in AWS Organizations such as integration with supported AWS services and organization management policies.
Consolidated Billing features – All organizations support this subset of features, which provides basic management tools that you can use to centrally manage the accounts in your organization.
Because enabling all features makes it possible to use SCPs, be sure that your account administrators understand the effects of attaching SCPs to the organization, organizational units, or accounts. SCPs can restrict what users and even administrators can do in affected accounts. For example, the management account can apply SCPs that can prevent member accounts from leaving the organization.
Hope this helps.
Let us know if you need further assistance. The Tutorials Dojo team is dedicated to helping you pass your AWS exam!
Regards,
Kenneth Samonte @ Tutorials Dojo
Log in to reply.