Accounts, Costs, etc.

Question 1

Do Service Policies affect both, management and member accounts, or only to the member accounts?

Answer 1

Only to the member accounts

Question 2

Which of the following are affected by Service Policies?

• IAM users
• IAM roles
• Resource-based policies

Answer 2

• IAM users
• IAM roles

Note: only those in the same Organization. If outside of the Organization, the SCP doesn’t affect them, even if they were to access a resource of an account managed by the Organization.

Question 3

What are the four different types of budgets available in AWS Budgets?

Answer 3

• Cost budgets
• Usage budgets
• Reserved Instance budgets (utilization + coverage)
• Saving Plans budgets (utilization + coverage)

Question 4

Can AWS Resource Access Manager (RAM) share resources with accounts outside of the same organization?

Answer 4

Yes, but only on an individual account basis. When being in the same organization, RAM can instead share resources with ALL accounts in the same org.

Question 5

Can AWS Resource Access Manager (RAM) share VPCs with other accounts?

Answer 5

No, but subnets.