Examkin

Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

A financial services firm manages its multi-account environment using AWS Organizations. The setup includes a central Network account, a Production Organizational Unit (OU) containing several production workload accounts, and a Sandbox OU containing experimental developer accounts. The company's management account has purchased a significant pool of Compute Savings Plans.

The Solutions Architect must implement a solution that achieves the following:
1. Allows instances in the Production OU accounts to be launched into subnets managed by the central Network account.
2. Prevents the Sandbox OU accounts from consuming the Compute Savings Plans benefits, ensuring the discounts are reserved for production workloads.
3. Minimizes administrative overhead for any future accounts added to the OUs.

Which combination of actions should the Solutions Architect take to meet these requirements?

  1. Enable sharing within AWS Organizations in the AWS Resource Access Manager (RAM) settings of the management account. In the central Network account, use AWS RAM to share the subnets, specifying the Production OU as the principal. In the Billing console of the management account, turn off Savings Plans discount sharing for all accounts in the Sandbox OU.Answer
  2. B
    In the central Network account, create an AWS Resource Access Manager (RAM) resource share for the subnets and send individual invitations to the Account IDs of each production account. In the Billing console of each sandbox account, disable the option to receive Savings Plans discount sharing from the management account.
  3. C
    Enable sharing within AWS Organizations in the AWS Resource Access Manager (RAM) settings of the management account. In the central Network account, use AWS RAM to share the subnets with the Production OU. Create a Service Control Policy (SCP) that denies the savingsplans:ApplyDiscount action, and attach it to the Sandbox OU.
  4. D
    Enable sharing within AWS Organizations in the AWS Resource Access Manager (RAM) settings of the management account. In the central Network account, use AWS RAM to share the subnets with the Production OU. For any encrypted resources launched in the shared subnets, configure the instances to use the default AWS-managed KMS key (aws/ebs) for cross-account volume encryption. In the Billing console of the management account, turn off Savings Plans discount sharing for all accounts in the Sandbox OU.

Answer

Enable sharing within AWS Organizations in the AWS Resource Access Manager (RAM) settings of the management account, share the subnets from the central Network account to the Production OU using AWS RAM, and turn off Savings Plans discount sharing for the Sandbox OU accounts in the billing preferences of the management account.
The correct approach involves enabling organization-wide sharing in AWS Resource Access Manager (RAM) at the management account level, sharing the subnets with the target Production Organizational Unit (OU) from the central Network account, and managing the Savings Plans discount sharing settings under the management account's Billing Preferences to exclude the Sandbox OU accounts. This configuration properly isolates resources, restricts discount application, and minimizes overhead by applying policies and sharing rules at the OU level rather than targeting individual accounts.

Step-by-Step Solution

1
Enable sharing within AWS Organizations in the AWS RAM console of the management account.
Enables the ability to share resources directly with OUs and accounts within the organization without individual invitations.
This satisfies the requirement to minimize administrative overhead for any future accounts added to the OUs.
2
Create a resource share in AWS RAM from the central Network account, selecting the subnets and specifying the Production OU as the principal.
The subnets are securely shared and accessible to all accounts within the Production OU.
This allows instances in the Production OU accounts to be launched into the subnets managed by the central Network account.
3
In the management account's Billing console, access Billing Preferences and disable Savings Plans discount sharing for the Sandbox OU accounts.
Excludes sandbox accounts from consuming the purchased Compute Savings Plans.
Savings Plans application is an automated billing mechanism that must be configured from the management account's billing preferences, not via IAM or member account settings.

Key Concept

AWS Organizations billing preferences and resource sharing strategies.
Rate this question

Topics

Billing, Cost Management, and Resource Sharing Strategy

More questions from this topic