Examkin

Soru

Zorluk: KolayBilling, Cost Management, and Resource Sharing Strategy

A company manages its multi-account environment using AWS Organizations. The administration wants to consolidate billing to leverage volume discounts and share VPC subnets from a central network account to application accounts. Which of the following statements are correct regarding AWS consolidated billing and resource sharing? (Select TWO.)

  1. Consolidated billing aggregates usage across all member accounts in the organization, allowing the company to qualify for volume pricing discounts on services like Amazon S3.Cevap
  2. AWS Resource Access Manager (RAM) allows the central network account to share VPC subnets with application accounts, enabling application resources to be deployed directly in the shared subnets.Cevap
  3. C
    Service Control Policies (SCPs) can be attached to the application accounts' Organizational Units (OUs) to grant the necessary read and write permissions for cross-account S3 bucket access.
  4. D
    To support cross-account access to shared S3 buckets, default AWS-managed KMS keys (such as aws/s3) can be shared by modifying their key policies to include external account IDs.

Cevap

Consolidated billing aggregates usage across all member accounts in the organization, allowing the company to qualify for volume pricing discounts. AWS Resource Access Manager (RAM) allows the central network account to share VPC subnets with application accounts, enabling application resources to be deployed directly in the shared subnets.
The correct answer combines the concepts of consolidated billing and AWS RAM. Consolidated billing aggregates usage across all member accounts in the organization, allowing them to qualify for volume pricing discounts (such as S3 storage tiers). AWS Resource Access Manager (RAM) allows a central network account to share subnets with other member accounts, allowing resources in those accounts to be deployed directly within the same subnets without duplicating the underlying VPC infrastructure.

Adım Adım Çözüm

1
Analyze consolidated billing rules
Consolidated billing combines usage across all member accounts in the AWS Organization to qualify for volume tier discounts.
This confirms consolidated billing works at the organization level for cost optimization.
2
Analyze resource sharing capabilities via AWS RAM
AWS RAM natively supports sharing subnets within an AWS Organization.
This allows resources in separate member accounts to be provisioned within the same subnet, reducing duplicate VPC infrastructure and administrative overhead.
3
Verify SCP functionality
SCPs only restrict permissions and cannot grant access across accounts.
This rules out using SCPs as a mechanism to grant cross-account S3 access.
4
Verify KMS key sharing rules
AWS-managed keys cannot be shared cross-account because their policies cannot be modified.
This rules out using aws/s3 for cross-account S3 access, requiring customer managed keys instead.

Anahtar Kavram

AWS Organizations consolidated billing and resource sharing via AWS Resource Access Manager (RAM) are key mechanisms for managing multi-account cost optimization and network administration.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Billing, Cost Management, and Resource Sharing Strategy

Bu konudan daha fazla soru