Which combinations of an AWS account management and governance service and its role are correct? (Choose TWO.)
A question about choosing the two correct pairings of an account management/governance service and its role.
AWS Marketplace - a consolidated billing mechanism that combines the billing of multiple accounts into one.
Combining the billing of multiple accounts is consolidated billing in AWS Organizations.
Marketplace is a catalog store for third-party software, so the description is wrong and it is incorrect.
AWS Organizations - centrally manages multiple accounts and applies permission guardrails across the organization with SCPs.
Correct. AWS Organizations centrally manages multiple accounts and can apply permission guardrails across the organization with service control policies (SCPs).
AWS Marketplace - lets you find, buy, and deploy third-party software.
Correct. AWS Marketplace is a catalog store where you can find and buy third-party software and quickly deploy it into your own AWS environment.
AWS Organizations - a mechanism that manages the permissions of users and groups within a single account.
Managing users, groups, and policies within a single account is the role of IAM.
AWS Organizations manages the multi-account organizational structure and guardrails through SCPs, NOT individual permissions within an account, so it is incorrect.
AWS Marketplace - a mechanism that distributes an organization-approved product catalog to internal users.
Cataloging organization-approved products and templates and distributing them internally is the role of AWS Service Catalog.
AWS Marketplace is a public store where you can broadly find and buy third-party products, NOT a mechanism for distributing an approved catalog internally, so it is incorrect.
Mapping: Organizations = central management of multiple accounts, consolidated billing, SCPs / Marketplace = third-party software procurement (public store) / Service Catalog = internal distribution of an approved catalog / IAM = permission management within a single account. Watch out for mixing up the roles.