-
Hello Palash,
Thank you for your feedback.
But I am confused that when consolidated billing is enabled how can scp be applied without the full feature. What am I missing please?
>> I understand that when using Consolidated Billing and applying SCP to the organization requires that “All feature” on AWS Organization must be enabled.
When using AWS Organizations, enabling All features is the default. Therefore, I think that going into this question, it is safe to assume that “All feature” for AWS Organization is enabled.
Please refer to this documentation: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html
AWS Organizations has two available feature sets:
All features – This feature set is the preferred way to work with AWS Organizations, and it includes Consolidating Billing features. When you create an organization, enabling all features is the default. With all features enabled, you can use the advanced account management features available in AWS Organizations such as integration with supported AWS services and organization management policies.
Consolidated Billing features – All organizations support this subset of features, which provides basic management tools that you can use to centrally manage the accounts in your organization.
Because enabling all features makes it possible to use SCPs, be sure that your account administrators understand the effects of attaching SCPs to the organization, organizational units, or accounts. SCPs can restrict what users and even administrators can do in affected accounts. For example, the management account can apply SCPs that can prevent member accounts from leaving the organization.
Hope this helps.
Let us know if you need further assistance. The Tutorials Dojo team is dedicated to helping you pass your AWS exam!
Regards,
Kenneth Samonte @ Tutorials Dojo
