AWS Certified Sysops Administrator Associate · Free Practice Question Medium
Question 42
A company is using AWS Organizations and wants to implement tag policies to standardize tags across resources in the organization's accounts. A SysOps administrator signs in to the organization’s management account with the required permissions but cannot activate tag policies.
Which of the following may resolve this issue?
-
A
Enable all features for the organization.
-
B
Enable consolidated billing for the organization.
-
C
Sign in to each member account and enable tag policies.
-
D
Enable service control policies (SCPs) first.
Reveal correct answer
Correct answer: A
Explanation
Tag policies are a type of policy that can help you standardize tags across resources in your organization's accounts. In a tag policy, you specify tagging rules applicable to resources when they are tagged.
Using tag policies requires the following:
• Your organization must have all features enabled.
• You must be signed in to your organization's management account.
• You need the correct IAM permissions for AWS Organizations.
In this case the question states that the administrator has permissions and is signed in to the management account. Therefore, the most likely issue is that all features are not enabled for the organization.
CORRECT: "Enable all features for the organization" is the correct answer.
INCORRECT: "Enable consolidated billing for the organization" is incorrect. All features must be enabled; consolidated billing is not enough.
INCORRECT: "Sign in to each member account and enable tag policies" is incorrect. The administrator is correctly signed in to the management account and does not need to enable tag policies in the member accounts.
INCORRECT: "Enable service control policies (SCPs) first" is incorrect. SCPs do not need to be enabled to use tag policies.
References:
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
