A company has five development teams that have each created five AWS accounts to develop and host applications. To track spending, the development teams log in to each account every month, record the current cost from the AWS Billing and Cost Management console, and provide the information to the company's finance team. The company has strict compliance requirements and needs to ensure that resources are created only in AWS Regions in the United States. However, some resources have been created in other Regions. A solutions architect needs to implement a solution that gives the finance team the ability to track and consolidate expenditures for all the accounts. The solution also must ensure that the company can create resources only in Regions in the United States. Which combination of steps will meet these requirements in the MOST operationally efficient way? (Choose three.)
Select 3 answers.
Marked answer: B
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose BDE1
BDE is correct
Chose BDE1
A. CUR to S3: Adds extra complexity. Finance can already view consolidated costs directly in the management account via Cost Explorer. Not needed. C. SCP with “allow only US regions”: SCPs work on explicit deny, not allow lists. Deny is the right approach. F. IAM role in each account: Operationally heavy (25+ accounts to manage). Centralized role in management account (E) is much more efficient.
