SAP-C02 practice question 16 of 35

A company that has multiple AWS accounts is using AWS Organizations. The company’s AWS accounts host VPCs, Amazon EC2 instances, and containers. The…

Full set: 689 questions

Domain Accelerate Workload Migration and Modernization

A company that has multiple AWS accounts is using AWS Organizations. The company’s AWS accounts host VPCs, Amazon EC2 instances, and containers. The company’s compliance team has deployed a security tool in each VPC where the company has deployments. The security tools run on EC2 instances and send information to the AWS account that is dedicated for the compliance team. The company has tagged all the compliance-related resources with a key of “costCenter” and a value or “compliance”. The company wants to identify the cost of the security tools that are running on the EC2 instances so that the company can charge the compliance team’s AWS account. The cost calculation must be as accurate as possible. What should a solutions architect do to meet these requirements?
Answer options
A: In the management account of the organization, activate the costCenter user-defined tag. Configure monthly AWS Cost and Usage Reports to save to an Amazon S3 bucket in the management account. Use the tag breakdown in the report to obtain the total cost for the costCenter tagged resources. Correct answer
B: In the member accounts of the organization, activate the costCenter user-defined tag. Configure monthly AWS Cost and Usage Reports to save to an Amazon S3 bucket in the management account. Schedule a monthly AWS Lambda function to retrieve the reports and calculate the total cost for the costCenter tagged resources.
C: In the member accounts of the organization activate the costCenter user-defined tag. From the management account, schedule a monthly AWS Cost and Usage Report. Use the tag breakdown in the report to calculate the total cost for the costCenter tagged resources.
D: Create a custom report in the organization view in AWS Trusted Advisor. Configure the report to generate a monthly billing summary for the costCenter tagged resources in the compliance team’s AWS account.
Correct Answer:
A. In the management account of the organization, activate the costCenter user-defined tag. Configure monthly AWS Cost and Usage Reports to save to an Amazon S3 bucket in the management account. Use the tag breakdown in the report to obtain the total cost for the costCenter tagged resources.
Explanation

The most precise source of chargeable usage is the AWS Cost and Usage Report (CUR). For resources in an AWS Organization, a user-defined tag must be activated in the management (payer) account before it appears in all member accounts’ cost data. After activation, the consolidated CUR that the management account creates and stores in an S3 bucket contains line-item costs broken down by that tag, allowing the company to sum the costCenter = compliance lines and cross-charge the compliance team accurately.

Why Incorrect

B. Member accounts cannot activate cost allocation tags; separate CURs and a Lambda aggregation add unnecessary complexity and possible inaccuracies.
C. Tag activation must be done in the management account, not in members; otherwise the tag data will not appear in the CUR.
D. Trusted Advisor provides optimization checks, not detailed cost reports by tag; it cannot generate a billing summary filtered on user-defined tags.

References

1. AWS Billing and Cost Management User Guide – “Activating user-defined cost allocation tags” (Only the management account can activate tags for the organization) – 2023-11-15, Section “Cost allocation tags”.

2. AWS Cost and Usage Reports User Guide – “Using Cost Allocation Tags in CUR” (CUR includes tag columns once activated) – 2023-10-05, Paragraph 2.

3. AWS Organizations Documentation – “Consolidated Billing and Cost allocation tags” (Tag activation in payer account applies to all member accounts) – 2023-09-12, Section “Sharing cost data across the organization”.

Scroll to Top