Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

A company manages a multi-account AWS environment under AWS Organizations. The network engineering team has created a central VPC in a Shared Services account and wants to share specific subnets with development accounts in the Organization to streamline IP address management. Additionally, the finance team has purchased a Compute Savings Plan in the management account to cover compute usage across the Organization, but wants to exclude a subset of testing accounts from benefiting from these discounts to accurately track their un-discounted research and development (R&D) costs.

Which of the following actions should the Solutions Architect recommend to achieve these goals? (Select TWO.)

  1. Enable resource sharing within the organization in the AWS Resource Access Manager (RAM) console, and create a resource share in the Shared Services account containing the subnets, sharing it with the development Organizational Unit (OU).Answer
  2. In the AWS Billing console of the management account, modify the Preferences settings to disable Savings Plans discount sharing for the specific testing accounts.Answer
  3. C
    Create an AWS RAM resource share for the subnets in the Shared Services account and invite each development account individually using their AWS account IDs without enabling organization-wide sharing.
  4. D
    Attach a Service Control Policy (SCP) to the testing accounts' OU that denies the savingsplans:PurchaseSavingsPlans and savingsplans:DescribeSavingsPlans actions to block the application of the discounts.
  5. E
    Purchase EC2 Instance Savings Plans in the management account and rely on consolidated billing to automatically apply the discounts to the AWS Fargate tasks run in the development accounts.

Answer

Enable resource sharing within the organization in the AWS Resource Access Manager console to share subnets with the development Organizational Unit, and modify the Preferences settings in the AWS Billing console of the management account to disable Savings Plans discount sharing for the specific testing accounts.
The correct strategy combines using AWS Resource Access Manager (RAM) with organization sharing enabled to distribute subnets to the development Organizational Unit (OU), and using Billing Preferences in the management account to selectively disable Savings Plans sharing for the testing accounts. This allows the Shared Services account to seamlessly share network resources without administrative overhead and allows the finance team to isolate un-discounted costs in the testing accounts.

Step-by-Step Solution

1
Enable organization sharing within AWS Resource Access Manager (RAM).
This allows resource sharing across the entire organization or specific OUs without requiring account-level invitations.
To securely and efficiently share subnets from the central Shared Services account to the development OU.
2
Create a Resource Share in the Shared Services account for the subnets.
The subnets become visible and usable by resources in the member accounts within the development OU.
This establishes the VPC resource sharing mechanism.
3
Navigate to the AWS Billing console in the management account and locate the Billing Preferences.
Access is granted to settings for Credit and Savings Plans sharing preferences.
This is where consolidated billing sharing behaviors are configured.
4
Disable discount sharing for the testing accounts.
The Compute Savings Plan discounts will no longer apply to compute usage in these specific accounts, keeping their R&D costs at standard rates.
To satisfy the finance team's requirement to track un-discounted costs for the testing accounts.

Key Concept

AWS RAM Organization Sharing and AWS Billing Discount Preferences
Estimated Time:2m 0s
Rate this question