Examkin

Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

A company is restructuring its AWS multi-account environment under AWS Organizations. The environment consists of a Management account, a Shared Network account, and multiple business unit accounts divided into Production and Development Organizational Units (OUs).

The company has two primary requirements:
1. Share specific private subnets owned by the Shared Network account with only the Production business unit accounts to deploy application resources.
2. Ensure that Compute Savings Plans purchased in the Management account apply discounts to workloads in the Production business unit accounts, but do not apply discounts to workloads in the Development business unit accounts.

Which of the following actions should the Solutions Architect take to meet these requirements? (Select TWO.)

  1. In the Management account's AWS Billing console, disable Savings Plan discount sharing for the individual accounts belonging to the Development Organizational Unit (OU).Answer
  2. In the Management account, enable resource sharing within AWS Organizations. In the Shared Network account, use AWS Resource Access Manager (RAM) to create a resource share containing the private subnets and associate it with the Production business unit Organizational Unit (OU).Answer
  3. C
    Attach a Service Control Policy (SCP) to the Development business unit Organizational Unit (OU) that denies the savingsplans:ApplyDiscount action.
  4. D
    In the Management account, use AWS Resource Access Manager (RAM) to create a resource share containing the private subnets from the Shared Network account, and associate the share with the Production business unit accounts.
  5. E
    Purchase EC2 Instance Savings Plans in the Management account to automatically prevent the discounts from applying to any accounts running serverless workloads in the Development business unit.

Answer

To meet the requirements, the Solutions Architect must disable Savings Plan discount sharing for the Development business unit accounts in the Management account's AWS Billing console, and use AWS Resource Access Manager (RAM) in the Shared Network account to share the private subnets with the Production business unit Organizational Unit (OU) after enabling sharing in AWS Organizations.
The correct strategy requires two actions: disabling Savings Plan discount sharing for the Development accounts in the Management account's Billing Preferences, and creating a resource share for the subnets inside the Shared Network account where the subnets reside, after enabling AWS Organizations resource sharing in the Management account. Disabling discount sharing for specific member accounts in the Billing Preferences allows the management account to control which accounts benefit from the organization's pooled Savings Plans. Sharing subnets must be done from the resource-owning account (Shared Network account) and directed to the Production Organizational Unit (OU).

Step-by-Step Solution

1
Configure resource sharing globally at the organization level.
Enables AWS Resource Access Manager (RAM) to share resources across accounts within the AWS Organization.
AWS RAM requires sharing with AWS Organizations to be explicitly enabled in the Management account before resources can be shared with OUs or other accounts in the organization.
2
Create the resource share for the subnets in the resource-owning account.
The private subnets are shared with the Production business unit Organizational Unit (OU).
Subnets must be shared from the account in which they were created (the Shared Network account) rather than from the Management account.
3
Configure Savings Plan sharing preferences in the AWS Billing console of the Management account.
Savings Plan discounts are disabled for the Development business unit accounts while remaining active for the Production business unit accounts.
AWS Consolidated Billing allows selective sharing of Reservation and Savings Plan discounts. Disabling discount sharing for specific member accounts ensures they pay regular rates and do not consume the Compute Savings Plans purchased by the Management account.

Key Concept

AWS Resource Access Manager (RAM) and consolidated billing discount sharing controls.
Rate this question

Topics

Billing, Cost Management, and Resource Sharing Strategy

More questions from this topic