Examkin

Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

An enterprise manages its multi-account AWS environment under a single AWS Organization with consolidated billing. The network architecture requires sharing a private VPC subnet from a dedicated Network account with two application accounts. These application accounts run auto-scaled Amazon EC2 workloads, AWS Fargate tasks on Amazon ECS, and AWS Lambda functions. The enterprise also wants to purchase a single Savings Plan from the management account to reduce compute costs across all of these workloads, but must exclude two specific development accounts in the organization from receiving the discount benefits. Which of the following strategies should a Solutions Architect implement to meet these requirements?

  1. Enable resource sharing within AWS Organizations in the AWS RAM settings. In the Network account, use AWS Resource Access Manager (RAM) to share the private subnet with the application accounts. Purchase a Compute Savings Plan in the management account, and disable Savings Plan discount sharing for the development accounts under Billing Preferences in the Billing console.Answer
  2. B
    Enable resource sharing within AWS Organizations in the AWS RAM settings. In the Network account, use AWS Resource Access Manager (RAM) to share the private subnet with the application accounts. Purchase an EC2 Instance Savings Plan in the management account, and use AWS Billing Conductor to configure billing groups that exclude the development accounts from the discount sharing.
  3. C
    Create a resource share for the subnet in AWS RAM in the Network account. Share the subnet directly with the individual application accounts by entering their account IDs, without enabling organization sharing in AWS RAM. Purchase a Compute Savings Plan in the management account, and disable Savings Plan discount sharing for the development accounts.
  4. D
    Attach a Service Control Policy (SCP) to the organization's root to allow AWS RAM subnet sharing and to automatically apply Compute Savings Plans discounts to the application accounts while denying them to the development accounts. In the Network account, share the subnet with the application accounts.

Answer

Enable resource sharing within AWS Organizations, share the subnet via AWS RAM, purchase a Compute Savings Plan in the management account, and disable discount sharing for the development accounts under Billing Preferences in the Billing console.
The correct strategy requires enabling organization sharing in AWS Resource Access Manager (RAM) and creating a resource share in the Network account to distribute the subnet to the application accounts. To cover EC2, Fargate, and Lambda, a Compute Savings Plan must be purchased in the management account. The exclusion of specific accounts from receiving the Savings Plan discounts must be configured in the Billing Preferences of the management account, which allows fine-grained control over discount sharing.

Step-by-Step Solution

1
Enable sharing within AWS Organizations in the AWS RAM console of the management account, then create a resource share for the subnet in the Network account targeting the application accounts.
The application accounts are successfully able to launch resources (EC2, Fargate) into the shared subnet.
AWS RAM subnet sharing is only supported between accounts within the same AWS Organization and requires enabling the organization sharing setting.
2
Determine the correct Savings Plan type and purchase it in the management account.
Purchase a Compute Savings Plan.
Compute Savings Plans are the only type that applies to EC2, AWS Fargate, and AWS Lambda workloads combined. EC2 Instance Savings Plans only cover EC2.
3
Configure Billing Preferences in the Billing console of the management account to disable discount sharing for the development accounts.
Savings Plans discounts are applied to the management account and all other member accounts except the excluded development accounts.
By default, Savings Plans discounts are shared across all accounts in the billing family. Disabling sharing for specific accounts allows you to control which accounts benefit from the discount.

Key Concept

Multi-account resource sharing via AWS Resource Access Manager (RAM) and cost optimization using Compute Savings Plans under AWS Organizations.
Estimated Time:1m 30s
Rate this question

Topics

Billing, Cost Management, and Resource Sharing Strategy

More questions from this topic