Q4 — AWS SAA-C03 Ch.13

Question 4 of 100 | ← Chapter 13

Q904. A company has deployed a multi-account strategy on AWS by using AWS Control Tower. The company has provided individual AWS accounts to each of its developers. The company wants to implement controls to limit AWS resource costs that the developers incur.Which solution will meet these requirements with the LEAST operational overhead?

• A. Instruct each developer to tag all their resources with a tag that has a key of CostCenter and a value of the developer's name. Use the required-tags AWS Config managed rule to check for the tag. Create an AWS Lambda function to terminate resources that do not have the tag. Configure AWS Cost Explorer to send a daily report to each developer to monitor their spending.
• B. Use AWS Budgets to establish budgets for each developer account. Set up budget alerts for actual and forecast values to notify developers when they exceed or expect to exceed their assigned budget. Use AWS Budgets actions to apply a DenyAll policy to the developer's IAM role to prevent additional resources from being launched when the assigned budget is reached. ✓
• C. Use AWS Cost Explorer to monitor and report on costs for each developer account. Configure Cost Explorer to send a daily report to each developer to monitor their spending. Use AWS Cost Anomaly Detection to detect anomalous spending and provide alerts.
• D. Use AWS Service Catalog to allow developers to launch resources within a limited cost range. Create AWS Lambda functions in each AWS account to stop running resources at the end of each work day.Configure the Lambda functions to resume the resources at the start of each work day.

Correct Answer: B. Use AWS Budgets to establish budgets for each developer account. Set up budget alerts for actual and forecast values to notify developers when they exceed or expect to exceed their assigned budget. Use AWS Budgets actions to apply a DenyAll policy to the developer's IAM role to prevent additional resources from being launched when the assigned budget is reached.

Explanation

The solution that will meet the requirements with the least operational overhead is:B. Use AWS Budgets to establish budgets for each developer account. Set up budget alerts for actual and forecast values to notify developers when they exceed or expect to exceed their assigned budget. Use AWS Budgets actions to apply a DenyAll policy to the developer's IAM role to prevent additional resources from being launched when the assigned budget is reached.This solution leverages AWS Budgets, which is a service designed specifically for monitoring and controlling costs on AWS. By setting up budgets for each developer account, the company can establish spending limits and receive alerts when the actual or forecasted costs exceed the assigned budget. This allows the developers to proactively monitor their spending and take appropriate actions to stay within the budget.Using AWS Budgets actions, the company can apply a DenyAll policy to the IAM role associated with each developer's account when the assigned budget is reached. This prevents additional resources from being launched, effectively limiting the cost incurred by the developers.This solution requires minimal operational overhead as it relies on the built-in functionality of AWS Budgets to monitor costs and enforce spending limits. It does not involve manual tagging, custom Lambda functions, or complex resource management.The other options mentioned have higher operational overhead or do not address the requirement as effectively:A. Instructing developers to tag resources and using a Lambda function to terminate resources without the tag would require manual effort and ongoing management. Additionally, relying solely on tagging may not be foolproof for cost control.C. While using AWS Cost Explorer and Cost Anomaly Detection can provide monitoring and alerting capabilities, it does not provide direct cost control mechanisms to limit the incurred costs.D. Using AWS Service Catalog and Lambda functions to stop and resume resources at specific times would require ongoing maintenance of the Lambda functions and may not be as effective for cost control as setting budget limits.In summary, option B using AWS Budgets to establish budgets, set up alerts, and apply a DenyAll policy provides a straightforward and efficient solution for limiting AWS resource costs incurred by developers with minimal operational overhead.