Examkin

Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

A university's bioinformatics division uses AWS Organizations to manage multiple research projects. A central engineering AWS account hosts a shared VPC with high-performance computing (HPC) subnets. The division needs to distribute these subnets to various project-specific member accounts for scratch space. They plan to purchase Compute Savings Plans to lower the run costs of their containerized workloads on AWS Fargate across all project accounts. However, a specific sandbox account used for external guest researchers must be excluded from receiving any Savings Plans discounts to keep its billing independent and clean. Which TWO actions should the Solutions Architect perform to implement this strategy? (Select TWO.)

  1. Enable sharing within AWS Organizations in the AWS Resource Access Manager console of the management account, then create a resource share for the subnets in the engineering account and associate it with the target organizational unit containing the project accounts.Answer
  2. Navigate to the Billing Preferences page in the AWS Billing console of the management account, turn off discount sharing for the sandbox account, and purchase the Compute Savings Plans in the management account.Answer
  3. C
    Create a Service Control Policy that denies the savingsplans:ApplyDiscount action, and attach the policy to the organizational unit containing the sandbox account.
  4. D
    Use AWS Resource Access Manager to share the subnets with the sandbox account, and encrypt the container storage using an AWS-managed KMS key to ensure cross-account data security.
  5. E
    Create a resource share in the engineering account for the subnets, set the principal to the external sandbox account ID, and enable external sharing in AWS Resource Access Manager without configuring AWS Organizations.

Answer

Enable sharing within AWS Organizations in the AWS Resource Access Manager console of the management account, then create a resource share for the subnets in the engineering account and associate it with the target organizational unit containing the project accounts. Additionally, turn off discount sharing for the sandbox account in the Billing Preferences page in the AWS Billing console of the management account, and purchase the Compute Savings Plans in the management account.
To share subnets, sharing within the organization must be enabled in AWS Resource Access Manager (RAM) from the management account. Once enabled, subnets can be shared from the resource owner account (engineering) to other accounts or OUs. To prevent the guest sandbox account from benefiting from the Compute Savings Plans purchased at the management level, discount sharing must be disabled specifically for that sandbox account in the Billing Preferences section of the AWS Billing console in the management account.

Step-by-Step Solution

1
Enable sharing within AWS Organizations in the AWS Resource Access Manager console using the management account.
Allows resources to be shared across organizational accounts without individual handshake requests.
AWS RAM requires organizational sharing to be enabled globally before subnets can be shared with member accounts.
2
Create a resource share for the subnets in the engineering account and share it with the target organizational unit containing the project accounts.
Project accounts receive access to the VPC subnets for launch configuration.
Enables multi-account resource sharing of network infrastructure (VPC subnets).
3
In the AWS Billing console of the management account, navigate to Billing Preferences, select discount sharing preferences, and uncheck the sandbox account.
Excludes the sandbox account from receiving Savings Plans and Reserved Instances discounts.
Ensures the guest sandbox account continues to be billed at standard on-demand rates without applying the organizational savings plan benefits.

Key Concept

AWS RAM allows sharing specific resources like subnets within an AWS Organization. Automated billing discounts such as Savings Plans apply globally by default in consolidated billing but can be selectively disabled per account using Billing Preferences in the management account.
Rate this question

Topics

Billing, Cost Management, and Resource Sharing Strategy

More questions from this topic