Organizations and consolidated billing: CLF-C02 study notes and practice questions
What to know about Organizations and consolidated billing for the CLF-C02 exam, from the Billing, Pricing, and Support domain (12% of the exam guide), then 1 free question to test it. Part of the CLF-C02 study guide.
Questions on this topic ask how a company with many AWS accounts can manage billing and rules in one place.
AWS Organizations
A management account creates the organization and invites or creates member accounts.
Accounts can be grouped into organizational units (OUs), such as Production and Development.
Service control policies (SCPs) set the maximum permissions for accounts in an OU, for example to block a Region or service. They limit; they don’t grant.
AWS Organizations has no extra charge.
Consolidated billing
One bill for all accounts, paid by the management account, with a breakdown per account.
Volume pricing: usage from all accounts is combined, so tiered prices (such as S3 storage) drop sooner.
Shared discounts: Reserved Instance and Savings Plans discounts apply across accounts by default, so unused commitments in one account help another. This sharing can be turned off.
Why use multiple accounts
Separate accounts isolate workloads (production from testing), set clear security boundaries, and make each team’s costs easy to see.
Related services
AWS Control Tower sets up a well-designed multi-account environment with guardrails.
AWS IAM Identity Center gives users single sign-on to all the accounts.
AWS Billing Conductor customizes how bills are shown to different groups.
Common traps
Thinking SCPs grant permissions. They only set limits; IAM policies grant access.
Thinking each account must buy its own Reserved Instances. Discounts are shared across the organization.
Paying separately per account. Consolidated billing gives one payment method and one bill.
Putting workloads in the management account. Keep it for billing and organization tasks; SCPs don’t apply to it.
B. Wrong: With discount sharing left on, Reserved Instances apply across the organization, so the discount is not lost. Only turning sharing off would limit it to the buying account.
C. Wrong: Member accounts do not need their own Reserved Instances to receive the discount. The management account's purchase can cover their usage.
D. Wrong: AWS does not move running instances between accounts. The discount applies to the usage where the instances already run.
Explanation
With consolidated billing and discount sharing left on, Reserved Instance discounts are shared across the organization. The matching usage in the member account is discounted, and nothing needs to move or be bought again.
Want more on Organizations and consolidated billing? The 5 full-length practice sets have 5 more Organizations and consolidated billing questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets →