SAP-C02 Practice Question: Design Solutions for Organizational Complexity
A company uses AWS Organizations and wants to enable cost allocation across business units using tags. They require that all resources are tagged with a 'CostCenter' tag. What is the most effective way to enforce this?
⚠ Common exam trap
Many exam-takers confuse SCPs with tag policies; candidates often think SCPs can enforce tag requirements on resource creation, but SCPs only deny actions based on existing tags, not enforce tag presence at creation time, whereas tag policies provide native enforcement for tag-on-create APIs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a tag policy in AWS Organizations that requires the CostCenter tag on resources.
AWS Organizations tag policies allow you to define rules for tagging resources across all accounts in the organization, including enforcement of required tags like 'CostCenter'. Tag policies are evaluated at resource creation and can prevent non-compliant resources from being created, ensuring consistent cost allocation tagging without requiring individual account-level IAM changes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create an IAM policy in each account that requires the CostCenter tag.
Why it's wrong here
Not centralized and difficult to manage across many accounts.
- ✗
Use AWS Config rules to identify untagged resources and automatically tag them.
Why it's wrong here
Detective and reactive; does not prevent creation of untagged resources.
- ✓
Create a tag policy in AWS Organizations that requires the CostCenter tag on resources.
Why this is correct
Tag policies centrally enforce tagging rules across all accounts.
- ✗
Use an SCP to deny resource creation if the CostCenter tag is missing.
Why it's wrong here
SCPs can enforce, but tag policies are a more direct and manageable solution.
Go deeper
Related to this question
About these practice questions
One of 1,660 original SAP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.