Examkin

Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

A retail company uses AWS Organizations to manage a multi-account environment consisting of a Management account, a Core Network account, and multiple business unit accounts grouped into Production, Development, and Sandbox Organizational Units (OUs). A central networking team has created a shared VPC in the Core Network account. The finance team has purchased Compute Savings Plans in the Management account to reduce overall compute costs.

The company's solutions architect must design a solution that meets the following requirements:
* The subnets in the shared VPC must be accessible only to the Production and Development accounts, with auto-acceptance of shared resources enabled.
* The Compute Savings Plan discounts must apply to all Production and Development accounts, but must not apply to workloads in the Sandbox accounts.

Which combination of actions should the solutions architect take to satisfy these requirements?

  1. Enable resource sharing within the AWS Organization in the AWS Resource Access Manager (RAM) settings. In the Core Network account, create a resource share in AWS RAM for the VPC subnets, and associate the share with the Production and Development OUs. In the Management account, navigate to the Billing preferences and disable Savings Plans discount sharing for the Sandbox accounts.Answer
  2. B
    In the Core Network account, use AWS RAM to share the VPC subnets with the Production and Development OUs. In the Management account, create a Service Control Policy (SCP) that denies the savingsplans:ApplyDiscount action, and attach this SCP to the Sandbox OU to prevent Sandbox workloads from utilizing the Compute Savings Plans.
  3. C
    In the Core Network account, create an AWS RAM resource share for the VPC subnets, and add the individual account IDs for all Production and Development accounts to the share. In each recipient account, manually accept the RAM resource share invitation. In the Management account, configure a billing policy that excludes Sandbox accounts from the consolidated billing family.
  4. D
    Enable resource sharing within the AWS Organization in the AWS RAM settings. In the Core Network account, share the VPC subnets with the Production and Development OUs. Enable default EBS volume encryption in the Core Network account using the AWS-managed KMS key (aws/ebs), share this key with the member accounts via AWS RAM, and disable Savings Plans discount sharing for the Sandbox accounts in Billing preferences.

Answer

The strategy that enables sharing within the AWS Organization in AWS RAM, shares the VPC subnets with the Production and Development OUs, and disables Savings Plans discount sharing for the Sandbox accounts in the Management account's Billing preferences.
The correct solution involves enabling AWS Organization sharing within AWS RAM, which allows resources shared with OUs to be accepted automatically. The subnets are then shared with the Production and Development OUs. Additionally, to exclude Sandbox accounts from the Compute Savings Plans benefits, the Solutions Architect must disable discount sharing for those accounts under the Billing preferences in the Management account.

Step-by-Step Solution

1
Enable Organization Sharing in AWS RAM
Allows resources shared within the Organization to be automatically accepted by member accounts without manual invitation handling.
This satisfies the requirement for auto-acceptance of shared subnets.
2
Create and Associate the Resource Share in AWS RAM
The subnets are shared specifically with the Production and Development OUs.
This restricts access to only the authorized OUs while leaving the Sandbox accounts excluded from the VPC sharing.
3
Configure Savings Plans sharing in the Management account's Billing preferences
Deactivates Savings Plans discount sharing for the specific account IDs belonging to the Sandbox OU.
This prevents workloads in the Sandbox accounts from applying and consuming the centralized Compute Savings Plans discounts.

Key Concept

Multi-account resource sharing and selective discount allocation within AWS Organizations
Estimated Time:2m 0s
Rate this question

Topics

Billing, Cost Management, and Resource Sharing Strategy

More questions from this topic