ANS-C01 Question 150
Single answerYour organization has multiple AWS accounts and wants to share Amazon VPC subnets across these accounts to allow resources in different accounts to communicate securely. Which AWS service or feature should you use to achieve this?
- A
AWS Resource Access Manager (RAM)
- B
Cross-Account IAM Roles
- C
VPC Peering
- D
AWS Transit Gateway
Show answer and explanation
Correct answer: A
Explanation
AWS Resource Access Manager (RAM) is specifically designed for sharing resources, such as Amazon VPC subnets, across AWS accounts securely and with minimal configuration. This makes it the correct choice for enabling resource sharing in this scenario. Other options like VPC Peering and AWS Transit Gateway are networking solutions but do not directly support sharing subnets between accounts.
- A. Correct.
AWS Resource Access Manager (RAM) allows you to share resources, such as Amazon VPC subnets, across AWS accounts without requiring additional networking configurations. It is the most suitable option for this scenario.
- B. Incorrect.
Cross-Account IAM Roles are used for granting permissions for one account to access resources in another account, but they do not facilitate resource sharing for networking purposes like VPC subnets.
- C. Incorrect.
VPC Peering enables direct connectivity between two VPCs, but it does not allow sharing of subnets across accounts. It also requires separate configurations for each VPC pair.
- D. Incorrect.
AWS Transit Gateway is used to simplify network connectivity between multiple VPCs and on-premises networks, but it does not enable sharing of subnets across accounts.