A company manages a multi-account AWS environment under AWS Organizations. The network engineering team has created a central VPC in a Shared Services account and wants to share specific subnets with development accounts in the Organization to streamline IP address management. Additionally, the finance team has purchased a Compute Savings Plan in the management account to cover compute usage across the Organization, but wants to exclude a subset of testing accounts from benefiting from these discounts to accurately track their un-discounted research and development (R&D) costs.
Which of the following actions should the Solutions Architect recommend to achieve these goals? (Select TWO.)
- Enable resource sharing within the organization in the AWS Resource Access Manager (RAM) console, and create a resource share in the Shared Services account containing the subnets, sharing it with the development Organizational Unit (OU).Cevap
- In the AWS Billing console of the management account, modify the Preferences settings to disable Savings Plans discount sharing for the specific testing accounts.Cevap
- CCreate an AWS RAM resource share for the subnets in the Shared Services account and invite each development account individually using their AWS account IDs without enabling organization-wide sharing.
- DAttach a Service Control Policy (SCP) to the testing accounts' OU that denies the savingsplans:PurchaseSavingsPlans and savingsplans:DescribeSavingsPlans actions to block the application of the discounts.
- EPurchase EC2 Instance Savings Plans in the management account and rely on consolidated billing to automatically apply the discounts to the AWS Fargate tasks run in the development accounts.
Cevap
Enable resource sharing within the organization in the AWS Resource Access Manager console to share subnets with the development Organizational Unit, and modify the Preferences settings in the AWS Billing console of the management account to disable Savings Plans discount sharing for the specific testing accounts.
The correct strategy combines using AWS Resource Access Manager (RAM) with organization sharing enabled to distribute subnets to the development Organizational Unit (OU), and using Billing Preferences in the management account to selectively disable Savings Plans sharing for the testing accounts. This allows the Shared Services account to seamlessly share network resources without administrative overhead and allows the finance team to isolate un-discounted costs in the testing accounts.
Adım Adım Çözüm
Anahtar Kavram
AWS RAM Organization Sharing and AWS Billing Discount Preferences
Tahmini Süre:2m 0s