Question 830
A professional architect is reviewing two independent workstreams. Requirement A: A startup expects to grow from five accounts to 100 and needs baseline account vending and preventive guardrails. Requirement B: Finance needs engineering costs apportioned by team using tags rather than guessed from account totals. Which TWO architecture changes cover both acceptance criteria?
Explanation
Correct Answers
This action meets the independently stated requirement A: A startup expects to grow from five accounts to 100 and needs baseline account vending and preventive guardrails. AWS Control Tower provides managed landing-zone governance and standardized account provisioning. A direct acceptance check is: New vended accounts inherit required landing-zone logging, identity and governance baselines.
This action meets the independently stated requirement B: Finance needs engineering costs apportioned by team using tags rather than guessed from account totals. Cost allocation tags must be activated before they appear in billing cost analytics. A direct acceptance check is: Cost and Usage Reports or Cost Explorer show tagged team spend after activation and reporting delay.
Incorrect Answers
This action targets a different technical need: A central networking account must share an existing Transit Gateway with application accounts without duplicating it. It does not replace either required solution in A or B. AWS RAM can share supported resources while ownership remains in a central account; verify the two stated requirements independently rather than accepting an unrelated change.
This action targets a different technical need: Two acquired subsidiaries have overlapping RFC1918 VPC CIDRs but must exchange traffic with a shared integration endpoint. It does not replace either required solution in A or B. Overlapping address spaces require translation or service-level isolation rather than simple routed peering; verify the two stated requirements independently rather than accepting an unrelated change.
This action targets a different technical need: Several accounts have steady EC2 and Fargate spend and need a commitment that applies to qualifying compute usage flexibly. It does not replace either required solution in A or B. Compute Savings Plans apply eligible usage discounts across supported services and configurations; verify the two stated requirements independently rather than accepting an unrelated change.