Your source says: "Use your AWS Identity and Access Management (IAM) user credentials with access permissions for AWS Support plans."
This suggests that the correct answer is not B.
Vote for A.
Amazon Doc says:
Changing the AWS Support plan does not require root access. You can change the support plan for your AWS account using the AWS Support Plans console or the AWS CLI.
he correct answer is:
A. Viewing billing information
Justification:
The AWS account root user has full access to all AWS resources and services, including tasks that involve account-level management. Some actions that require the root user credentials include:
Viewing billing information
Changing AWS account settings (such as email or payment method)
Managing AWS account permissions
Why Not the Other Options?
B. Changing the AWS Support plan → Changing the AWS Support plan can be done by an IAM user with appropriate permissions, not necessarily the root user.
C. Starting and stopping Amazon EC2 instances → This task can be done by IAM users with the appropriate permissions, so it doesn’t require root user access.
D. Opening an AWS Support case → AWS Support cases can be opened by IAM users if they have the necessary permissions, so the root user is not required.
Visualización de la información de facturación:
El usuario raíz es la única cuenta que puede acceder a la información de facturación de la cuenta de AWS, sin posibilidad de delegar este permiso a otros usuarios a través de IAM.
Cambio del plan de soporte:
No se requiere necesariamente el usuario raíz. Un usuario IAM con permisos administrativos puede realizar esta acción si se le conceden los permisos adecuados.
Changing the AWS Support plan requires root user credentials because it involves account-level changes, and only the root user can modify critical settings like the support plan.
Viewing billing information can be done by users with appropriate permissions without needing the root user credentials.
Starting and stopping Amazon EC2 instances can be performed by IAM users with the correct permissions; it does not require root user credentials.
Opening an AWS Support case can be done by any user with the necessary permissions and does not require root user credentials.
B is not correct answer.
A should be correct answer why?
Because of the following
AMS monitors root usage. We recommend that you use root only for the few tasks that require it, for example: changing your account settings, activating AWS Identity and Access Management (IAM) access to billing and cost management, changing your root password, and enabling multi-factor authentication (MFA).
The answer is B:
https://docs.aws.amazon.com/awssupport/latest/user/changing-support-plans.html
You can use the AWS Support Plans console to change your support plan for your AWS account. To change your support plan, you must have AWS Identity and Access Management (IAM) permissions or sign in to your account as a root user. For more information, see Manage access to AWS Support Plans and AWS managed policies for AWS Support Plans.
It's Option A. Refer this document https://docs.aws.amazon.com/IAM/latest/UserGuide/root-user-tasks.html. It has this task under the list 'View certain tax invoices. An IAM user with the aws-portal:ViewBilling permission can view and download VAT invoices from AWS Europe, but not AWS Inc. or Amazon Internet Services Private Limited (AISPL).'
I'm very confused on this one.. Looking at this doc - https://docs.aws.amazon.com/IAM/latest/UserGuide/root-user-tasks.html I can't relate to any of provided options.. ;D
The task that requires using AWS account root user credentials is:
B. Changing the AWS Support plan.
Changing the AWS Support plan typically requires root user credentials because it involves modifying billing and support-related settings at the AWS account level. This task requires administrative privileges, which are associated with the root user of an AWS account.
Think of this as a cloud, platform, aws, devops, etc engineer working with AWS in a company environment.
Show me a legitimate company that regularly wants basic view/list/describe on Billing to be isolated to the root account, which should almost NEVER be used. While the modify action on the company's/organization's AWS support plan (Enterprise Support plan is $15k/month MINIMUM) is regularly performed and should be shared via IAM roles or Identity Center's permission sets? That would make no sense. You'd even be getting your TAM reaching out to you if your company's AWS Support plan suddenly changed since it's such an impactful change.
The answer is clearly B although this question appears to be a bit outdated since a root user technically can share BOTH functions with policy based users as of a few months ago.
last part of my comment -
D. Opening an AWS Support case
https://docs.aws.amazon.com/awssupport/latest/user/case-management.html
You can create a support case in the Support Center of the AWS Management Console.
... sign in to Support Center as the root user of your AWS account or as an AWS Identity and Access Management (IAM) user.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Kantene
Highly Voted 2 years, 5 months agoQuibble
1 year, 9 months agobibidev42
Highly Voted 1 year, 6 months agotheskyfire
1 year, 6 months agoHebaXX
Most Recent 1 week, 2 days agoHari012
1 month, 4 weeks agoandri0015
3 months agosonaljain
3 months agoKokoScripts
6 months agoKingZP
7 months, 2 weeks agoJosephKY
7 months, 4 weeks ago07074ed
9 months, 3 weeks agoThandie_D
12 months agoOsitaSr
1 year agomnsmahamuni
1 year agoSausainis
1 year, 1 month agohar_new
1 year, 1 month agoaudience_member
1 year, 1 month agoNoahC180
8 months, 2 weeks agoDenisMc
1 year, 1 month ago