An enterprise manages an AWS Organization with consolidated billing. The environment consists of three member accounts with the following workloads:
* Account A (Web Application): A production web application running on Amazon EC2 instances in an Auto Scaling Group across Availability Zones. The instances are currently ( vCPUs, GiB RAM). Metrics indicate average CPU utilization is and peak memory utilization is GiB.
* Account B (APIs): A containerized payment API workload running on AWS Fargate.
* Account C (Data Processing): An event-driven data pipeline using AWS Lambda.
To optimize outgoing internet traffic costs, the company wants to consolidate their NAT Gateway configuration, as each account currently has its own NAT Gateways deployed across Availability Zones. The solution must maintain high availability, maximize discount coverage for all compute workloads, and minimize administrative effort.
Which strategy should the Solutions Architect recommend to optimize resource costs and sizing while meeting these requirements?
- In Account A, update the Auto Scaling Group launch template to use instances. In the AWS Organizations management account, purchase a Compute Savings Plan to cover compute costs across all accounts. Deploy redundant NAT Gateways across Availability Zones in a centralized VPC, share the private subnets with the member accounts using AWS Resource Access Manager (RAM), and configure the member account route tables to direct outbound internet traffic through the shared subnets.Answer
- BIn Account A, update the Auto Scaling Group launch template to use instances. In the AWS Organizations management account, purchase a Compute Savings Plan to cover compute costs across all accounts. In Account A, use AWS Resource Access Manager (RAM) to share the NAT Gateways directly with the VPCs in Account B and Account C, and configure their route tables to direct outbound traffic through the shared NAT Gateways.
- CIn Account A, update the Auto Scaling Group launch template to use instances. In the AWS Organizations management account, purchase a Compute Savings Plan to cover compute costs across all accounts. Deploy a single NAT Gateway in a centralized VPC, share the private subnets with the member accounts using AWS Resource Access Manager (RAM), and configure the member account route tables to direct all outbound traffic through the single NAT Gateway.
- DIn Account A, update the Auto Scaling Group launch template to use instances. In the AWS Organizations management account, purchase an EC2 Instance Savings Plan for the family. Deploy redundant NAT Gateways across Availability Zones in a centralized VPC, share the private subnets with the member accounts using AWS Resource Access Manager (RAM), and configure the member account route tables to direct outbound internet traffic through the shared subnets.