A company is designing a multi-account strategy using AWS Organizations. The solutions architect needs to share specific VPC subnets from a central network account with application accounts, and also wants to ensure that compute discounts are shared globally across all member accounts to optimize costs. Which of the following actions should the solutions architect take to meet these requirements? (Select TWO.)
- Enable resource sharing within AWS Organizations in the AWS Resource Access Manager (RAM) settings, and share the VPC subnets with the organization or specific organizational units.Cevap
- Enable consolidated billing under AWS Organizations, allowing Compute Savings Plans purchased in the management account to apply to eligible compute usage across all member accounts.Cevap
- CCreate the subnet resource shares directly using AWS Resource Access Manager without enabling AWS Organizations integration, as subnets can be shared externally without constraints.
- DPurchase EC2 Instance Savings Plans in the management account to automatically cover AWS Fargate and AWS Lambda compute usage across all member accounts.
- EAttach a Service Control Policy (SCP) to the organization's root to automatically grant IAM administrative permissions for VPC subnet creation in all member accounts.
Cevap
Enable resource sharing within AWS Organizations in the AWS Resource Access Manager (RAM) settings, and enable consolidated billing under AWS Organizations to share Compute Savings Plans across member accounts.
To share subnets across accounts in the organization, the integration between AWS Resource Access Manager (RAM) and AWS Organizations must be enabled. Additionally, to leverage compute discount benefits globally, consolidated billing should be configured, allowing Compute Savings Plans to automatically apply to eligible EC2, Fargate, and Lambda usage across all member accounts under the billing family.
Adım Adım Çözüm
Anahtar Kavram
AWS RAM subnet sharing and organization-wide application of Compute Savings Plans