Consolidated Billing and Service Control Policies for AWS Organizations
A company operates separate AWS accounts for its engineering, marketing, and finance departments. The CFO wants to consolidate billing to receive a single monthly invoice and to benefit from volume pricing discounts. The security team also requires a centralized mechanism to prevent users in any department from launching Amazon EC2 instances outside of the us-east-1 and eu-west-1 Regions to meet data residency compliance. Which AWS service or feature should the company use to meet both requirements?
Quick Answer
The answer is AWS Organizations with Service Control Policies (SCPs). This combination directly meets both requirements because AWS Organizations enables consolidated billing across multiple accounts, allowing the CFO to receive a single monthly invoice and benefit from volume pricing discounts, while SCPs act as a centralized governance layer that can restrict which AWS Regions and services each member account can use, such as preventing EC2 launches outside us-east-1 and eu-west-1 for data residency compliance. On the AWS Certified Cloud Practitioner CLF-C02 exam, this scenario tests your understanding that SCPs are not the same as IAM policies—SCPs set account-wide guardrails that apply to all users and roles, while IAM policies control individual permissions. A common trap is confusing SCPs with IAM or thinking billing consolidation alone solves compliance; remember that SCPs are the “bouncer” at the account door, not the per-user rulebook. Memory tip: “Billing unites, SCPs restricts”—consolidated billing merges the invoice, SCPs lock down the Regions.
⚠ Common exam trap
Many candidates confuse AWS Budgets with billing consolidation, or think IAM cross-account roles can enforce regional restrictions, but only AWS Organizations with SCPs provides both centralized billing control and policy-based resource governance across multiple accounts.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Organizations with Service Control Policies (SCPs)
AWS Organizations allows the company to consolidate multiple AWS accounts under a single management account, enabling consolidated billing for a single monthly invoice and volume pricing discounts. Service Control Policies (SCPs) provide centralized governance by restricting the AWS services and Regions that member accounts can use, such as preventing EC2 instances from being launched outside us-east-1 and eu-west-1. This combination directly addresses both the CFO's billing consolidation needs and the security team's data residency compliance requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Budgets
Why it's wrong here
AWS Budgets allows you to set custom cost and usage budgets and receive alerts when thresholds are exceeded, but it does not consolidate billing across accounts or enforce permissions such as restricting regions.
When this WOULD be correct
A company wants to receive alerts when actual or forecasted costs exceed defined thresholds for individual AWS accounts or projects, without needing consolidated billing or cross-account policy enforcement.
- ✓
AWS Organizations with Service Control Policies (SCPs)
Why this is correct
AWS Organizations provides consolidated billing for a single invoice and volume discounts, and SCPs allow you to centrally define and enforce permission guardrails (e.g., restricting Regions) across all member accounts. This directly meets both requirements.
- ✗
AWS Identity and Access Management (IAM) cross-account roles
Why it's wrong here
IAM cross-account roles enable users in one account to assume roles in another account for temporary access, but they do not provide a way to consolidate billing or enforce blanket restrictions like a region lock across all accounts. Setting up such restrictions would require manual configuration in each account and does not offer central enforcement.
When this WOULD be correct
A company needs to grant users in Account A access to specific S3 buckets in Account B without sharing long-term credentials, while maintaining individual account billing. IAM cross-account roles would be the correct solution.
- ✗
AWS Cost and Usage Reports
Why it's wrong here
AWS Cost and Usage Reports provide detailed cost and usage data that can be analyzed with tools like Amazon Athena, but they do not consolidate billing or provide any policy enforcement capabilities. They are a reporting tool, not a governance or billing consolidation service.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CLF-C02 exam frequently reuses these exact scenarios with slightly different constraints.
✓AWS Organizations with Service Control Policies (SCPs)Correct answer▾
Why this is correct
AWS Organizations provides consolidated billing for a single invoice and volume discounts, and SCPs allow you to centrally define and enforce permission guardrails (e.g., restricting Regions) across all member accounts. This directly meets both requirements.
✗AWS BudgetsWrong answer — click to see why▾
Why this is wrong here
AWS Budgets only provides cost monitoring and alerts, not consolidated billing or preventive policy enforcement to restrict EC2 instance launches by Region.
★ When this WOULD be the correct answer
A company wants to receive alerts when actual or forecasted costs exceed defined thresholds for individual AWS accounts or projects, without needing consolidated billing or cross-account policy enforcement.
Why candidates choose this
Candidates may confuse cost management features (Budgets) with billing consolidation and governance capabilities, assuming Budgets can enforce spending limits or regional restrictions.
✗AWS Identity and Access Management (IAM) cross-account rolesWrong answer — click to see why▾
Why this is wrong here
IAM cross-account roles allow users to assume roles in other accounts to access resources, but they do not provide consolidated billing or centralized policy enforcement to restrict EC2 regions across all accounts.
★ When this WOULD be the correct answer
A company needs to grant users in Account A access to specific S3 buckets in Account B without sharing long-term credentials, while maintaining individual account billing. IAM cross-account roles would be the correct solution.
Why candidates choose this
Candidates may confuse IAM's ability to manage permissions across accounts with the centralized policy enforcement and billing consolidation provided by AWS Organizations and SCPs.
Analysis generated from the official CLF-C02blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
6 more ways this is tested on CLF-C02
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company operates multiple AWS accounts for separate departments. The finance team wants to simplify monthly billing by receiving a single consolidated invoice that covers all accounts. Additionally, the company wants to aggregate usage across accounts to qualify for lower volume-based pricing tiers. Which AWS feature should the company enable to meet these requirements?
medium- ✓ A.Consolidated billing through AWS Organizations
- B.AWS Cost Explorer
- C.AWS Budgets
- D.AWS Trusted Advisor
Why A: AWS Organizations enables consolidated billing by allowing you to combine multiple AWS accounts under a single paying account, which aggregates usage across all accounts. This aggregation qualifies the company for lower volume-based pricing tiers (e.g., AWS volume discounts for services like S3 or EC2) because usage is summed across all member accounts. The master account receives a single consolidated invoice covering all accounts, simplifying monthly billing.
Variation 2. A company uses separate AWS accounts for development, testing, and production. The finance team wants to receive a single monthly invoice that covers all accounts and to benefit from volume pricing discounts across the entire organization. Which AWS feature should the company use to achieve this?
medium- ✓ A.Enable Consolidated Billing in AWS Organizations
- B.Set up an AWS Budget to track all account costs
- C.Use Cost Explorer to generate a combined cost report
- D.Activate AWS Trusted Advisor on the management account
Why A: AWS Organizations with Consolidated Billing allows a company to combine usage across multiple accounts into a single monthly invoice, enabling the organization to aggregate usage and benefit from volume pricing discounts (e.g., tiered pricing for EC2, S3, or data transfer). The management account pays for all member accounts, and the consolidated view simplifies cost tracking while maximizing savings from AWS's graduated pricing model.
Variation 3. A company operates in three separate AWS accounts: one for development, one for testing, and one for production. The company wants to take advantage of volume pricing discounts across all accounts for services such as Amazon S3 and Amazon EC2. The finance team also wants to view a single, consolidated monthly bill that aggregates charges from all accounts. Which AWS feature should the company implement?
medium- A.AWS Cost Explorer
- B.AWS Budgets
- ✓ C.AWS Organizations with consolidated billing
- D.AWS Trusted Advisor
Why C: AWS Organizations with consolidated billing is the correct feature because it allows the company to combine all three AWS accounts (development, testing, production) into a single organization, enabling volume pricing discounts across accounts for services like Amazon S3 and Amazon EC2. It also aggregates usage from all accounts into a single monthly bill, which the finance team can view. This is the only AWS feature that directly provides both consolidated billing and aggregated usage for pricing benefits.
Variation 4. A company operates three separate AWS accounts, one for production, one for development, and one for testing. The finance team wants to receive a single monthly invoice that shows the total charges from all three accounts combined. They also want to aggregate usage across accounts to benefit from volume discounts on Amazon S3 and Amazon EC2. Additionally, the team wants to apply a single payment method (credit card) to cover charges for all accounts. Which AWS feature should the finance team use to meet these requirements?
medium- A.AWS Budgets
- B.AWS Cost Explorer
- ✓ C.Consolidated Billing through AWS Organizations
- D.AWS Cost and Usage Report
Why C: Consolidated Billing through AWS Organizations is the correct feature because it allows the finance team to link multiple AWS accounts under a single organization, enabling a single monthly invoice that aggregates charges from all accounts. This aggregation also combines usage across accounts for services like Amazon S3 and Amazon EC2, allowing the team to benefit from volume discounts. Additionally, Consolidated Billing supports a single payment method (credit card) that covers charges for all linked accounts, meeting all stated requirements.
Variation 5. A company operates three separate AWS accounts: development, testing, and production. Each account independently incurs Amazon S3 data transfer charges. The company signs up for AWS Organizations and enables consolidated billing. How does consolidated billing affect the S3 data transfer pricing for the company?
easy- A.It applies a flat 20% discount to all S3 data transfer charges across accounts.
- ✓ B.It aggregates the data transfer usage across all accounts, allowing the company to benefit from lower pricing tiers that are based on total usage.
- C.It allows the company to use a single payment method and automatically applies Reserved Instance pricing to data transfer.
- D.It creates a single combined bill and automatically applies an enterprise discount negotiated with AWS.
Why B: Consolidated billing in AWS Organizations aggregates usage across all linked accounts. For S3 data transfer, AWS applies tiered pricing based on total monthly data transfer volume. By combining usage from the development, testing, and production accounts, the company can reach higher volume tiers, reducing the per-GB cost for all accounts. This is the primary benefit of consolidated billing for data transfer charges.
Variation 6. A company operates 10 AWS accounts, each managed by a separate team. Each account runs its own Amazon EC2 instances and stores data in Amazon S3. The CFO wants to minimize overall costs by taking advantage of volume discount pricing tiers that AWS offers (e.g., lower per-GB storage costs as total S3 usage increases). Which AWS feature should the company use to combine usage from all accounts so they benefit from the highest possible volume discounts?
easy- A.AWS Budgets
- B.AWS Cost Explorer
- ✓ C.AWS Organizations with consolidated billing
- D.AWS Trusted Advisor
Why C: AWS Organizations with consolidated billing allows you to aggregate usage from all member accounts into a single payer account. This combined usage qualifies for volume discount pricing tiers (e.g., lower S3 per-GB storage costs as total usage increases), enabling the company to benefit from the highest possible discounts across all 10 accounts.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.