
Ultimate access to all questions.
A company utilizes AWS Organizations to manage multiple AWS accounts, with each business unit operating applications on Amazon EC2 instances. It is mandatory for all EC2 instances to be tagged with a BusinessUnit tag to facilitate cost tracking per business unit. An audit has identified instances without this tag, which were subsequently manually tagged. What measures should a solutions architect implement to ensure future compliance with the tagging requirement?
A
Enable tag policies within the organization, create a tag policy for the BusinessUnit tag, ensure tag key capitalization compliance is disabled, apply the tag policy to ec2:instance resource types, and attach the tag policy to the organization's root.
B
Enable tag policies within the organization, create a tag policy for the BusinessUnit tag, ensure tag key capitalization compliance is enabled, apply the tag policy to ec2:instance resource types, and attach the tag policy to the organization's management account.
C
Create a Service Control Policy (SCP) and attach it to the organization's root, including a statement in the SCP to enforce tagging.
D
Create a Service Control Policy (SCP) and attach it to the organization's management account, including a statement in the SCP to enforce tagging.