Examkin

Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

An enterprise manages its multi-account environment using AWS Organizations. The architecture consists of a Management account, a central Network account, and multiple member accounts grouped into a Production Organizational Unit (OU) and a Development OU. The Solutions Architect needs to implement a resource-sharing and cost-optimization strategy. The strategy must allow the Network account to share private subnets with the Development OU. Additionally, Compute Savings Plans purchased in the Management account must apply only to the Production OU accounts, and the Development OU accounts must be excluded to keep development costs separated. Which of the following actions should the Solutions Architect perform to meet these requirements? (Select TWO.)

  1. Enable resource sharing with AWS Organizations in the AWS RAM console of the Management account. In the Network account, create a resource share for the subnets and share them with the Development OU.Answer
  2. In the Management account, open the Billing preferences in the AWS Billing and Cost Management console, and disable Savings Plans sharing for all member accounts within the Development OU.Answer
  3. C
    Attach a Service Control Policy (SCP) to the Development OU that denies the savingsplans:Apply action to block the application of Savings Plans discounts to the resources running in the development accounts.
  4. D
    In the Network account, create a resource share in AWS RAM for the subnets, set the principal to the Development OU, and enable sharing with external entities in AWS RAM to bypass AWS Organizations integration.
  5. E
    Purchase EC2 Instance Savings Plans in the Management account instead of Compute Savings Plans, as EC2 Instance Savings Plans do not support cross-account sharing and will automatically remain isolated to the Management account.

Answer

Enable resource sharing with AWS Organizations in the AWS RAM console of the Management account and create the resource share in the Network account to share subnets with the Development OU; and disable Savings Plans sharing for the Development OU member accounts in the Billing Preferences of the Management account.
To share subnets within the AWS Organization, resource sharing must be enabled in the Management account's AWS RAM console. Subnets can then be shared directly with the Development OU from the owner account (the Network account). To exclude the Development OU from the Compute Savings Plans discounts while allowing other accounts to benefit, Savings Plans sharing must be disabled for those specific development accounts within the Billing Preferences of the Management account.

Step-by-Step Solution

1
Enable Organizations integration for resource sharing.
Allows RAM to share resources with organizational elements like OUs.
By default, resource sharing across accounts within an organization using OUs requires the Organizations integration to be enabled in the Management account.
2
Create and configure the AWS RAM resource share.
The subnets in the Network account are shared with the Development OU.
The Network account owns the subnets, so the share must be created there and target the Development OU.
3
Manage Savings Plans sharing settings in the Management account.
Disables the automatic application of the Management account's Savings Plans discounts to the Development OU accounts.
Savings Plans sharing preferences are managed globally or per-account in the Billing preferences of the Management account, not via IAM/SCPs.

Key Concept

AWS Organizations billing preferences and AWS Resource Access Manager sharing controls
Rate this question

Topics

Billing, Cost Management, and Resource Sharing Strategy

More questions from this topic