Which combination of steps will meet these requirements?
(Choose three.)
Create an SCP to set a fixed monthly account usage limit. Apply the SCP to the developer accounts.
Use AWS Budgets to create a fixed monthly budget for each developer’s account as part of the account creation process.
Create an SCP to deny access to costly services and components. Apply the SCP to the developer accounts.
Create an IAM policy to deny access to costly services and components. Apply the IAM policy to the developer accounts.
Create an AWS Budgets alert action to terminate services when the budgeted amount is reached. Configure the action to terminate all services.
Create an AWS Budgets alert action to send an Amazon Simple Notification Service (Amazon SNS) notification when the budgeted amount is reached. Invoke an AWS Lambda function to terminate all services.
Explanations:
AWS Budgets allows the creation of a fixed monthly budget for each account. This can help developers manage their AWS costs and prevent overspending by alerting them when they approach or exceed their allocated budget.
An SCP (Service Control Policy) can be used to deny access to costly services or components. Applying it to the developer accounts ensures they cannot use expensive services, thus helping limit costs.
AWS Budgets allows the creation of budget alerts. By using an SNS notification and invoking a Lambda function, the company can automate the termination of services when a budget threshold is reached.
SCPs cannot be used to set a fixed monthly account usage limit. SCPs are designed to control which AWS services and actions can be accessed, not to enforce a cost limit directly.
IAM policies control access to AWS services, but they do not directly enforce cost limits. Denying access to costly services through IAM policies might limit usage, but it does not provide a comprehensive budget control mechanism.
AWS Budgets cannot directly terminate services when a budget is exceeded. The alert actions in AWS Budgets can only send notifications or invoke other actions, like an SNS notification, but not terminate services directly.
If I’m not mistaken, the answer is:
Use AWS Budgets to create a fixed monthly budget for each developer’s account as part of the account creation process.