Question

Difficulty: EasyBilling, Cost Management, and Resource Sharing Strategy

A company is designing a multi-account strategy using AWS Organizations. The solutions architect needs to share specific VPC subnets from a central network account with application accounts, and also wants to ensure that compute discounts are shared globally across all member accounts to optimize costs. Which of the following actions should the solutions architect take to meet these requirements? (Select TWO.)

  1. Enable resource sharing within AWS Organizations in the AWS Resource Access Manager (RAM) settings, and share the VPC subnets with the organization or specific organizational units.Answer
  2. Enable consolidated billing under AWS Organizations, allowing Compute Savings Plans purchased in the management account to apply to eligible compute usage across all member accounts.Answer
  3. C
    Create the subnet resource shares directly using AWS Resource Access Manager without enabling AWS Organizations integration, as subnets can be shared externally without constraints.
  4. D
    Purchase EC2 Instance Savings Plans in the management account to automatically cover AWS Fargate and AWS Lambda compute usage across all member accounts.
  5. E
    Attach a Service Control Policy (SCP) to the organization's root to automatically grant IAM administrative permissions for VPC subnet creation in all member accounts.

Answer

Enable resource sharing within AWS Organizations in the AWS Resource Access Manager (RAM) settings, and enable consolidated billing under AWS Organizations to share Compute Savings Plans across member accounts.
To share subnets across accounts in the organization, the integration between AWS Resource Access Manager (RAM) and AWS Organizations must be enabled. Additionally, to leverage compute discount benefits globally, consolidated billing should be configured, allowing Compute Savings Plans to automatically apply to eligible EC2, Fargate, and Lambda usage across all member accounts under the billing family.

Step-by-Step Solution

1
Enable AWS Organizations integration within AWS Resource Access Manager (RAM) in the management account.
This allows subnets to be shared with organizational units or the entire organization without requiring individual handshakes.
VPC subnet sharing via RAM requires AWS Organizations integration to be enabled for seamless intra-org sharing.
2
Configure Consolidated Billing in AWS Organizations and purchase Compute Savings Plans.
Aggregated billing enables cost benefits to flow down, allowing Compute Savings Plans purchased in the management account to apply to eligible EC2, Fargate, and Lambda instances across all member accounts.
Compute Savings Plans provide the flexibility to cover multiple compute services across the entire organization.

Key Concept

AWS RAM subnet sharing and organization-wide application of Compute Savings Plans
Rate this question