A company wants to centrally manage security policies and billing services within a multi-account AWS environment. Which AWS service should the…

AWS Organizations is a service designed for centrally governing and managing multiple AWS accounts. It enables users to consolidate billing for all member accounts into a single payment method under the management account. Furthermore, it allows the central application of security policies, known as Service Control Policies (SCPs), to enforce permissions and security guardrails across all accounts within the organization. This combination of features directly meets the company's requirements for centralized security policy and billing management in a multi-account environment.

A. AWS Identity and Access Management (IAM) manages user permissions and access to resources primarily within a single AWS account, not for central multi-account governance.

C. AWS Resource Access Manager (AWS RAM) is used to share specific AWS resources with other accounts, not for managing billing or overarching security policies.

D. AWS Config is a service for auditing and evaluating the configurations of AWS resources for compliance, not for central billing or policy enforcement.

---

1. AWS Organizations User Guide. (n.d.). What is AWS Organizations? AWS Documentation. Retrieved from https://docs.aws.amazon.com/organizations/latest/userguide/orgsintroduction.html.

Section: "What is AWS Organizations?"

Paragraph 1: "AWS Organizations helps you to centrally manage and govern your environment as you grow and scale your AWS resources."

Section: "Key concepts and terminology"

"Consolidated billing": "You can use the management account of your organization to consolidate and pay for all of your member accounts."

2. AWS Organizations User Guide. (n.d.). Service control policies (SCPs). AWS Documentation. Retrieved from https://docs.aws.amazon.com/organizations/latest/userguide/orgsmanagepoliciesscps.html.

Section: "Service control policies (SCPs)"

Paragraph 1: "Service control policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization."

3. AWS Identity and Access Management User Guide. (n.d.). What is IAM? AWS Documentation. Retrieved from https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html.

Section: "What is IAM?"

Paragraph 1: "AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources." (Note: The scope is access control

not central billing/policy for an organization).