ANS-C01 Question 147
Single answerYour organization has multiple AWS accounts, and you need to share access to an Amazon VPC Subnet from one account with another. The goal is to allow the second account to launch resources into the shared subnet while maintaining centralized control of resources in the first account. Which AWS feature should you use to achieve this?
- A
VPC Peering
- B
AWS Resource Access Manager (RAM)
- C
Transit Gateway
- D
Cross-Account IAM Roles
Show answer and explanation
Correct answer: B
Explanation
AWS Resource Access Manager (RAM) is the correct service for sharing resources like subnets across AWS accounts. By sharing a subnet through RAM, you can allow other AWS accounts to launch resources into the subnet while retaining centralized control over the network configuration in the original account. Other options, such as VPC Peering and Transit Gateway, are suitable for network connectivity but do not enable resource sharing, and Cross-Account IAM Roles are intended for access management rather than resource sharing.
- A. Incorrect.
VPC Peering allows you to connect two VPCs privately but does not enable sharing of specific resources like subnets across accounts.
- B. Correct.
AWS Resource Access Manager (RAM) is the appropriate service for sharing AWS resources, such as VPC subnets, across AWS accounts securely and efficiently.
- C. Incorrect.
Transit Gateway is used to connect multiple VPCs and on-premises networks but does not serve the purpose of sharing specific resources like subnets across accounts.
- D. Incorrect.
Cross-Account IAM Roles allow users or applications in one account to access resources in another account, but they do not enable resource sharing like VPC subnets.