A healthcare SaaS company runs a medical imaging archiving workload in a dedicated member account of an AWS Organization. The architecture consists of the following components:
- A fleet of Amazon EC2 instances running inside an Auto Scaling group behind an Application Load Balancer across three Availability Zones. The instances are currently of type `c5.xlarge` (which provides vCPUs and GiB of memory). Over the past 90 days, CloudWatch metrics show average CPU utilization is at , while memory utilization consistently peaks at .
- An Amazon RDS for PostgreSQL database instance (`db.r5.8xlarge` with vCPUs and GiB of memory) configured in a Multi-AZ deployment. Database CPU utilization averages and write throughput is low.
- Several AWS Lambda functions used for processing metadata, triggering dynamically throughout the day.
Consolidated billing is managed from the management account. The company wants to optimize costs while ensuring no degradation in performance, durability, or availability.
Which combination of recommendations will achieve the greatest cost optimization? (Select TWO.)
- Modify the Auto Scaling group launch template to use `m6g.large` instances, which provide vCPUs and GiB of memory, and recompile the application for the Graviton architecture.Answer
- Purchase Compute Savings Plans in the AWS Organizations management account to maximize discount coverage across the EC2 instances in the member account and the Lambda functions.Answer
- CPurchase EC2 Instance Savings Plans in the member account for the C5 instance family to ensure the discounts are strictly locked to the application instances and cover the Lambda functions.
- DTo reduce NAT Gateway costs in the member account, deploy a single NAT Gateway in one Availability Zone and update the route tables of the private subnets across all Availability Zones to route outbound internet traffic through this single NAT Gateway.
- EConsolidate outbound traffic by sharing subnets using AWS Resource Access Manager (RAM) with external third-party partner accounts outside the AWS Organization to route traffic through a single NAT Gateway, without enabling sharing with external entities in the RAM settings.