X
Lab complete!
Now that you have completed this lab, make sure to update your Well-Architected review if you have implemented these changes in your workload.
Click here to access the Well-Architected Tool
Level 200: Cost and Usage Governance
Last Updated
May 2020
Authors
- Nathan Besh, Cost Lead Well-Architected
- Spencer Marley, Commercial Architect
Feedback
If you wish to provide feedback on this lab, there is an error, or you want to make a suggestion, please email: costoptimization@amazon.com
Introduction
This hands-on lab will guide you through the steps to implement cost and usage governance. The skills you learn will help you control your cost and usage in alignment with your business requirements.
Goals
- Implement IAM Policies to control usage
Prerequisites
- AWS Account Setup has been completed
Permissions required
- Log in as the Cost Optimization team, created in AWS Account Setup
- Add the following IAM Policy for this lab
- NOTE: There may be permission error messages during the lab, as the console may require additional privileges. These errors will not impact the lab, and we follow security best practices by implementing the minimum set of privileges required.
Costs
- A small number of instances will be started & then immediately terminated
- Costs will be less than $5 if all steps including the teardown are performed
Time to complete
- The lab should take approximately 15 minutes to complete
Steps:
- Create a group of users for testing
- Create an IAM Policy to restrict service usage by region
- Create an IAM Policy to restrict EC2 usage by family
- Extend an IAM Policy to restrict EC2 usage by instance size
- Create an IAM policy to restrict EBS Volume creation by volume type
- Teardown