SCS-C02 Question 458
Select 3Your company has been facing challenges in managing resources across AWS accounts due to inconsistent tagging practices. As the security team lead, you are tasked with implementing a tagging strategy to improve resource visibility, access control, and cost management. Which of the following best practices should you follow when designing your tagging strategy?
- A
Define a standardized set of tags and enforce their usage across all AWS accounts
- B
Use tags for sensitive information like API keys and passwords for better resource tracking
- C
Implement automated tools or scripts to monitor and report on untagged or improperly tagged resources
- D
Limit the number of tags to three per resource to ensure simplicity and avoid complexity
- E
Use cost allocation tags to track and allocate costs to specific projects, teams, or environments
Show answer and explanation
Correct answers: A, C, E
Explanation
Tagging is a key practice for managing AWS resources effectively. Defining a standardized and enforced tagging strategy ensures consistency across accounts. Automated tools help maintain tagging compliance, while cost allocation tags enhance financial tracking and management. Avoid using tags for sensitive information to prevent security risks, and do not arbitrarily limit the number of tags, as they should align with organizational requirements.
- A. Correct.
Defining a standardized set of tags and enforcing their usage ensures consistency and improves the ability to manage resources effectively across AWS accounts.
- B. Incorrect.
Tags should never be used to store sensitive information like API keys or passwords, as this poses a serious security risk.
- C. Correct.
Automated tools or scripts can help maintain tagging hygiene by identifying untagged or improperly tagged resources, ensuring adherence to the tagging strategy.
- D. Incorrect.
While limiting tags can simplify management, it unnecessarily restricts the flexibility and functionality of tagging, which should be based on organizational needs.
- E. Correct.
Cost allocation tags are critical for tracking and assigning costs to projects, teams, or environments, enabling better financial management and accountability.