Question

A global company with a large number of AWS accounts is seeking a way in which they can centrally manage billing and security policies across all accounts. Which AWS Service will assist them in meeting these goals?

1) AWS CloudFormation
2) AWS Organizations
3) AWS Identity and Access Management (IAM)
4) AWS Config

Answer 1

AWS Organizations is the service that helps globally manage billing and security policies across multiple AWS accounts, providing consolidated billing and policy management at scale.

Step-by-step explanation:

The AWS Service that allows a global company to centrally manage billing and security policies across a large number of AWS accounts is AWS Organizations. AWS Organizations helps in centrally managing and governing your environment as you grow and scale your AWS resources. By using AWS Organizations, companies can consolidate billing across multiple AWS accounts, leading to simplified billing processes and potential cost savings. Additionally, it allows the application of security policies across accounts, ensuring compliance with the company's security standards. While services like AWS IAM help with user permissions within individual accounts, and AWS Config helps in tracking resource changes, it is AWS Organizations that aligns with the goal of managing policies and billing at scale. AWS CloudFormation, on the other hand, is more about automating deployment of resources and infrastructure as code, which is not directly related to billing or policy management.