SAP-C02 Practice Question 92: Budget Actions Automatic Guardrail
AWS Certified Solutions Architect – Professional (SAP-C02) · Test 10 · question 2 of 10
A company gives each team a sandbox AWS account with a monthly budget. The platform team works from the organization's management account. Teams occasionally exceed the budget by launching large instances that they forget to stop. The finance team wants the platform team to have a control that automatically restricts further spending in a sandbox account when the account's forecasted monthly cost reaches 90 percent of its budget, without waiting for a person to react, and with as little custom code as possible.
Which solution meets these requirements?
Show answer and explanation
Answer:
*"You can use AWS Budgets to run an action on your behalf when a budget exceeds a certain cost or usage threshold. To do this, after you set a threshold, configure a budget action to run either automatically or after your manual approval."* The available actions include *"applying an IAM policy or a service control policy (SCP)"* or targeting specific EC2 or RDS instances, and AWS gives the pattern of acting automatically *"when you reach 90 percent of your forecasted costs for the month"* by applying a custom deny policy that stops users provisioning more resources (option B). From the management account, the action can apply an SCP to a member account, and AWS notes that with SCPs you do not need to provision any new resources during the budget period.
- A is wrong because it needs custom code to write and maintain, and billing alarms use actual estimated charges rather than a forecast. - C is wrong because it relies on people reacting to email, which is the delay that the finance team wants to remove. - D is wrong because Cost Anomaly Detection alerts on unusual spend patterns. It cannot apply restrictions or stop resources.
Reference: Configuring budget actions