An enterprise manages its multi-account environment using AWS Organizations. The cloud architecture team is implementing a centralized networking and cost management strategy with the following requirements:
- A Transit Gateway created in a dedicated Network account must be shared with all member accounts in the organization to enable hybrid connectivity. The sharing process must be automated, avoiding manual resource share invitations.
- The company has purchased Savings Plans to lower costs for its workloads running on AWS Fargate and AWS Lambda.
- The discounts from these Savings Plans must be prioritized for production accounts, meaning dev/test accounts must be excluded from automatically absorbing these discounts.
Which TWO actions should the solutions architect take to meet these requirements?
- In the AWS Resource Access Manager (RAM) console of the organization's management account, enable resource sharing with AWS Organizations. In the Network account, create a resource share for the Transit Gateway and share it with the target organizational units (OUs).Answer
- In the AWS Billing console of the management account, access the Billing Preferences and disable Savings Plans discount sharing for the specific dev/test member accounts.Answer
- CPurchase EC2 Instance Savings Plans in the management account to cover the AWS Fargate and AWS Lambda workloads, and rely on consolidated billing to automatically apply the discounts.
- DIn the Network account, create an AWS RAM resource share for the Transit Gateway and attempt to share it directly with external partner accounts by entering their account IDs without enabling the 'Allow sharing with external principals' setting in the resource share.
- ECreate a Service Control Policy (SCP) that denies the ram:AcceptResourceShareInvitation action, and attach it to the dev/test Organizational Unit (OU) to block the sharing of the Transit Gateway and any billing discounts.