A software conglomerate uses AWS Organizations with consolidated billing to manage multiple business units, each represented by a distinct set of member AWS accounts. A central Network account manages the shared VPC infrastructure. A Solutions Architect must design a cost management and resource sharing strategy to meet the following requirements:
1. Generate separate, customized monthly billing reports (pro forma bills) for each business unit, applying a 10% markup on all Amazon EC2 usage to cover internal administrative costs.
2. Share public and private subnets from the central Network account with the member accounts of specific business units to allow application deployment.
3. Prevent the sharing of Savings Plans benefits from the management account to a newly acquired business unit's accounts, allowing that business unit to purchase and apply its own Savings Plans exclusively.
Which of the following actions should the Solutions Architect take to meet these requirements? (Select TWO.)
- Create billing groups in AWS Billing Conductor for each business unit. Associate the member accounts of each business unit with their respective billing group, and apply a custom pricing plan containing a 10% markup rate rule for Amazon EC2.Cevap
- In the AWS Billing console of the management account, disable Savings Plans discount sharing for the member accounts belonging to the newly acquired business unit. In the central Network account, use AWS Resource Access Manager (RAM) to create a resource share for the subnets and share them with the AWS Organizations Organizational Unit (OU) of the target business unit.Cevap
- CCreate a Service Control Policy (SCP) that denies the savingsplans:ApplySavingsPlan action, and attach it to the Organizational Unit (OU) of the newly acquired business unit to block the application of organization-level Savings Plans.
- DIn the central Network account, use AWS Resource Access Manager (RAM) to share the subnets. Configure the default AWS-managed KMS key for EBS (aws/ebs) in the Network account to encrypt resources within the shared subnets and delegate usage permissions to the member accounts.
- EEnable external resource sharing in AWS Resource Access Manager (RAM). Create a resource share for the subnets and share them with the individual AWS account IDs of the newly acquired business unit as external entities to isolate them from the organization's billing scope.