Clarification on Consolidated Billing Related Question

[CexamR]

[apologies if this double posts — looks like my initial post got lost in the ether due to site maintenance]

Hey folks, looking for a clarification here on two items. All relevant info below past the “~~~”.

1) Between O1 & O2; is O2 implying only Consolidated features are enabled and O1 implies “ensure that all features is enabled and then validate consolidated billing works”?

2) On your O1 answer description, it may be beneficial to specify where to “ensure that consolidated billing is enabled is correct” on the new consolidated billing panel.

~~~~~~~~~~~~~~~~~~~~~~~~~~~

TD Question & Explanations –>

Category: CSAP – Design Solutions for Organizational Complexity

A retail company has several subsidiaries with offices located in different countries in Southeast Asia. Each subsidiary has an AWS account that is used for hosting the company retail website, which is customized per country. The parent company wants to have better control on all the AWS accounts as well as visibility on the costs incurred for each account. The Solutions Architect has been tasked to implement a solution that will satisfy the following requirements:

Provide a cost breakdown report for each subsidiary AWS account.

Have a single AWS invoice for all the subsidiary AWS accounts.

Provide full administration privileges on each subsidiary AWS account, regardless of the parent company’s policy.

Have the ability to restrict the services and features that can be used on each subsidiary AWS account, as defined by the parent company’s policy.

Which of the following actions should the Solutions Architect take in order to fulfill the requirements? (Select TWO.)

~~~~~~~~~~~~~~~~~~~~~~~~~~~
O0: Define Service Control Policy (SCP) documents to only allow services and features defined by the parent company policy. Apply the necessary SCP for each subsidiary AWS account. [correct]
O1: Create an AWS Organization on the parent company’s AWS account and invite all the subsidiary AWS accounts. On the AWS Billing and Cost Management console of the parent account, ensure that consolidated billing is enabled. [correct]
O2: Create an AWS account for the parent company and create a single AWS Organization with the Consolidated Billing features set. Invite each of the subsidiary AWS accounts to join the AWS Organization of the parent company. [incorrect]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~

(O1 Answer Description) The option that says: Create an AWS Organization on the parent company’s AWS account and invite all the subsidiary AWS accounts. On the AWS Billing and Cost Management console of the parent account, ensure that consolidated billing is enabled is correct. Consolidated billing allows the management account owner to have only one invoice for all accounts in the organization. And by default, each member account is independent of the other member accounts, so each subsidiary has full administration privileges unless controlled by the parent account.

(O2 Answer Description) The option that says: Create an AWS account for the parent company and create a single AWS Organization with the Consolidated Billing features set. Invite each of the subsidiary AWS accounts to join the AWS Organization of the parent company is incorrect. Although creating an AWS organization is necessary, using only the Consolidated Billing features set is not enough to satisfy the requirements. Even though “All Features” is enabled by default, this will be overridden if you enable only the “Consolidated Billing” feature. This means that you cannot use the SCP to your member AWS accounts anymore. You need to enable “All features” on the AWS Organization to be able to create and apply SCP for each subsidiary.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Doc Link –>

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html

======

Enabling Process –>

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html#manage-begin-all-features

~~~~~~~~~~~~~~~~~~~~~~~~~~~~

• This discussion was modified 4 months ago by  CexamR.

[Nikee-TutorialsDojo]

Hi CexamR,

Thank you for bringing this to our attention. Your detailed analysis and the time invested in highlighting inaccuracies in the explanation are highly appreciated.

To provide clarification, the question pertains to the two feature sets of AWS Organization. Option 1 suggests enabling all features of AWS Organization on the parent company’s AWS account, while option 2 involves activating only the Consolidated Billing features. We apologize for any confusion that this may have caused. We will make the necessary updates and ensure that they are reflected in the portal as soon as possible.

If you need further assistance, don’t hesitate to contact us.

Regards,

Nikee @ Tutorials Dojo