A customer needs corporate IT governance and cost oversight of all AWS resources consumed by its divisions. The divisions want to maintain administrative control of the discrete AWS resources they consume and keep those resources separate from the resources of other divisions. Which of the following options, when used together will support the autonomy/control of divisions while enabling corporate IT to maintain governance and cost oversight?
A. Use AWS Consolidated Billing and disable AWS root account access for the child accounts.
B. Enable IAM cross-account access for all corporate IT administrators in each child account.
C. Create separate VPCs for each division within the corporate IT AWS account.
D. Use AWS Consolidated Billing to link the divisions' accounts to a parent corporate account.
E. Write all child AWS CloudTrail and Amazon CloudWatch logs to each child account's Amazon S3 'Log'
bucket.
Answer:
B. Enable IAM cross-account access for all corporate IT administrators in each child account.
D. Use AWS Consolidated Billing to link the divisions' accounts to a parent corporate account.
You might also like to view...
A characteristic of __________ is that only an object's methods are able to directly access and make changes to an object's data.
a. classes b. procedures c. data hiding d. component reusability
What is the difference between workflow analysis and job analysis?
What will be an ideal response?
Clip Art, once inserted into a worksheet, can be modified in all the following ways EXCEPT:
A) image content. B) height. C) width. D) color.
A footer prints information at the bottom of every page
Indicate whether the statement is true or false