ANS-C01 Question 149
Single answerYou are managing a multi-account AWS environment where multiple AWS accounts need access to a shared Amazon VPC for deploying resources. What is the best approach to allow resource sharing while minimizing administrative overhead and maintaining security?
- A
Enable VPC sharing using AWS Resource Access Manager (RAM) and share the required subnets with other accounts.
- B
Create a VPN connection between the accounts and route traffic through the shared VPC.
- C
Use an AWS Transit Gateway to allow communication between VPCs in different accounts.
- D
Manually create peering connections between the VPCs of all accounts to share resources.
Show answer and explanation
Correct answer: A
Explanation
The best approach to securely and efficiently share VPC resources across multiple AWS accounts is by using AWS Resource Access Manager (RAM) to share subnets. This method simplifies resource sharing, reduces administrative overhead, and maintains security by avoiding unnecessary complexity such as VPNs, Transit Gateways, or manual peering.
- A. Correct.
This is the correct approach. AWS Resource Access Manager (RAM) allows you to share VPC subnets across AWS accounts, enabling centralized management and reduced complexity while maintaining security.
- B. Incorrect.
This is not the best approach as it involves unnecessary complexity and additional costs for VPN connections, which are not required for VPC sharing.
- C. Incorrect.
While AWS Transit Gateway can facilitate communication between VPCs, it is not the most efficient or cost-effective solution for simply sharing VPC resources.
- D. Incorrect.
Manual VPC peering connections can become complex and difficult to manage in a multi-account setup, especially as the number of accounts increases.