Question

Difficulty: MediumBilling, Cost Management, and Resource Sharing Strategy

A software conglomerate uses AWS Organizations with consolidated billing to manage multiple business units, each represented by a distinct set of member AWS accounts. A central Network account manages the shared VPC infrastructure. A Solutions Architect must design a cost management and resource sharing strategy to meet the following requirements:
1. Generate separate, customized monthly billing reports (pro forma bills) for each business unit, applying a 10% markup on all Amazon EC2 usage to cover internal administrative costs.
2. Share public and private subnets from the central Network account with the member accounts of specific business units to allow application deployment.
3. Prevent the sharing of Savings Plans benefits from the management account to a newly acquired business unit's accounts, allowing that business unit to purchase and apply its own Savings Plans exclusively.

Which of the following actions should the Solutions Architect take to meet these requirements? (Select TWO.)

  1. Create billing groups in AWS Billing Conductor for each business unit. Associate the member accounts of each business unit with their respective billing group, and apply a custom pricing plan containing a 10% markup rate rule for Amazon EC2.Answer
  2. In the AWS Billing console of the management account, disable Savings Plans discount sharing for the member accounts belonging to the newly acquired business unit. In the central Network account, use AWS Resource Access Manager (RAM) to create a resource share for the subnets and share them with the AWS Organizations Organizational Unit (OU) of the target business unit.Answer
  3. C
    Create a Service Control Policy (SCP) that denies the savingsplans:ApplySavingsPlan action, and attach it to the Organizational Unit (OU) of the newly acquired business unit to block the application of organization-level Savings Plans.
  4. D
    In the central Network account, use AWS Resource Access Manager (RAM) to share the subnets. Configure the default AWS-managed KMS key for EBS (aws/ebs) in the Network account to encrypt resources within the shared subnets and delegate usage permissions to the member accounts.
  5. E
    Enable external resource sharing in AWS Resource Access Manager (RAM). Create a resource share for the subnets and share them with the individual AWS account IDs of the newly acquired business unit as external entities to isolate them from the organization's billing scope.

Answer

Create billing groups and custom pricing plans in AWS Billing Conductor to apply the markup, disable Savings Plans sharing in the management account's billing preferences for the specific member accounts, and use AWS RAM to share the subnets with the target Organizational Unit.
To generate separate pro forma bills with markups, AWS Billing Conductor should be used to create billing groups and apply custom pricing plans. To selectively prevent Savings Plans benefits from being shared with specific member accounts, Savings Plans discount sharing must be disabled in the AWS Billing console of the management account. Additionally, AWS Resource Access Manager (RAM) allows sharing VPC subnets within the AWS Organization by sharing them with the target Organizational Unit (OU).

Step-by-Step Solution

1
Address the custom billing markup requirement by configuring AWS Billing Conductor.
Create billing groups for each business unit and attach a custom pricing plan that defines a 10% markup rule on Amazon EC2 services.
AWS Billing Conductor allows generating pro forma monthly billing data with customized pricing rules for target accounts without changing the actual consolidated invoice.
2
Disable Savings Plans sharing for the newly acquired business unit's accounts in the billing console.
Turn off Savings Plans discount sharing for those member accounts in the management account's billing preferences.
This isolates the subsidiary's billing so they do not receive the organization's shared Savings Plans benefits, allowing them to purchase and apply their own.
3
Share the subnets from the central Network account with the target business unit's accounts.
Use AWS Resource Access Manager (RAM) to create a resource share for the subnets and target the OU of the business unit.
AWS RAM supports sharing VPC subnets within the AWS Organization to enable multi-account resource sharing under centralized network management.

Key Concept

AWS Billing Conductor is used for pro forma billing custom pricing, AWS Billing preferences manage consolidated billing discount sharing, and AWS RAM supports sharing resources like subnets within an AWS Organization.
Rate this question