Examkin

Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

An international non-profit organization is restructuring its AWS multi-account environment under a single AWS Organization with consolidated billing. The organization needs to share a central database subnet in a Transit Gateway-connected network VPC with development accounts. Additionally, they want to utilize their consolidated Savings Plans across the organization but must exclude a newly acquired subsidiary account (Account ID: `111122223333`) that operates under its own budget and cannot share its compute benefits. Which two strategies should the cloud architect implement to meet these requirements?

  1. In the AWS Billing Console of the Management account, navigate to Billing Preferences and disable Savings Plan discount sharing for the subsidiary account to ensure its compute resources do not consume or contribute to the organization's pooled discounts.Answer
  2. In the Network account, use AWS Resource Access Manager (RAM) to create a resource share for the database subnets, target the AWS Organization ID or specific Organizational Unit (OU) ID, and ensure that resource sharing is enabled within AWS Organizations.Answer
  3. C
    In the Management account, apply a Service Control Policy (SCP) to the subsidiary account's OU that explicitly denies the `savingsplans:ApplyDiscount` and `savingsplans:ShareBenefit` actions to restrict the application of consolidated discounts.
  4. D
    In the Network account, configure AWS RAM to share the database subnets directly with the individual AWS Account ID of the subsidiary without enabling organizational sharing, and configure the subnets' default AWS-managed KMS key (`aws/ec2`) to permit cross-account access.

Answer

Disable Savings Plan discount sharing for the subsidiary account in the Billing Preferences of the Management account, and use AWS Resource Access Manager in the Network account to share the subnets to the AWS Organization or OUs while ensuring organizational sharing is enabled.
To exclude the subsidiary account from consuming shared Savings Plans, the Management account must disable discount sharing for that specific account in Billing Preferences. To securely and efficiently share database subnets from the Network account to development accounts, the administrator must use AWS Resource Access Manager, share the subnets with the Organization or OUs, and ensure organizational sharing is enabled in AWS RAM.

Step-by-Step Solution

1
Disable discount sharing for the subsidiary account.
The subsidiary account is isolated from consolidated Savings Plans benefits.
This prevents the subsidiary's compute resources from consuming consolidated discounts, adhering to their separate budget requirement.
2
Enable organization sharing in AWS RAM.
AWS RAM is permitted to share resources across the AWS Organization without individual account invitations.
This simplifies administration and enables secure subnet sharing within the Organization boundaries.
3
Create a resource share for the database subnets.
The database subnets are shared with the target development accounts or OUs.
This allows resources in the development accounts to be launched directly into the shared Network VPC subnets.

Key Concept

AWS Organizations billing consolidated discounts management and AWS Resource Access Manager (RAM) subnet sharing.
Rate this question

Topics

Billing, Cost Management, and Resource Sharing Strategy

More questions from this topic