A multinational enterprise manages a multi-account environment under AWS Organizations with all features enabled. The architecture includes a management account, a centralized shared services account, and multiple member accounts allocated to external clients. The enterprise wants to implement the following requirements:
* Provide a customized chargeback billing view to specific client accounts. The clients must see a consolidated invoice showing a flat markup on all Amazon EC2 and Amazon RDS resources, while ensuring that enterprise-level Savings Plans and Reserved Instance (RI) discounts applied at the management account are not visible or shared with these client accounts.
* Share a centralized AWS Glue Data Catalog located in the shared services account with the client accounts so they can perform cross-account Amazon Athena queries without duplicating catalog metadata. This resource sharing must be restricted strictly to the enterprise's AWS Organization.
* Purchase a Savings Plan that provides the maximum discount coverage for client workloads running on a mix of Amazon EC2 instances, AWS Lambda, and AWS Fargate on Amazon EKS.
Which combination of actions will meet these requirements? (Select TWO.)
- In AWS Billing Conductor in the management account, create a billing group containing the client accounts. Configure the billing group settings to exclude Savings Plans and Reserved Instance discount sharing. Create a pricing rule with a markup for the Amazon EC2 and Amazon RDS services, and associate the rule with the billing group.Answer
- BIn the AWS Billing Conductor console in the management account, create a billing group for the client accounts. Purchase EC2 Instance Savings Plans in the client accounts directly. Define an AWS Cost Category with a rule that applies a chargeback tax to all services, and write a Service Control Policy (SCP) to block access to the Billing Dashboard for the client accounts.
- Enable resource sharing in the AWS Organizations management account. In AWS Resource Access Manager (RAM) in the shared services account, create a resource share for the AWS Glue Catalog databases and tables, and associate it with the client accounts or their Organizational Unit (OU). In the management account, purchase Compute Savings Plans to cover the compute consumption across all accounts.Answer
- DIn AWS Resource Access Manager (RAM) in the shared services account, create a resource share for the AWS Glue Data Catalog, enabling sharing with external entities. In the management account, purchase EC2 Instance Savings Plans to cover the EC2, Fargate, and Lambda workloads across the organization.