ANS-C01 Question 168
Select 3Your organization has a multi-account AWS setup. The central networking team wants to manage a single Amazon VPC that can be shared with multiple AWS accounts. This VPC will host shared services like a NAT Gateway and internal DNS servers, while other teams will deploy their resources such as EC2 instances and RDS databases in their respective subnets. Which of the following are advantages of using VPC sharing in this scenario?
- A
Centralized management of networking resources like NAT Gateways and Route Tables
- B
Elimination of the need for inter-VPC peering connections between accounts
- C
Ability for participating accounts to independently manage security groups and network ACLs
- D
Support for sharing public subnets with participating accounts
- E
Ability to share VPCs across AWS Regions
Show answer and explanation
Correct answers: A, B, C
Explanation
VPC sharing allows multiple AWS accounts to share a single VPC owned by a central account. This setup reduces the complexity of inter-VPC networking, such as peering connections, and enables centralized management of networking resources while allowing participating accounts to manage their own resources independently. However, public subnets are not supported for sharing, and VPC sharing is limited to the same Region.
- A. Correct.
Correct. VPC sharing allows the central account to manage networking resources like NAT Gateways and Route Tables centrally, reducing duplication of effort and cost.
- B. Correct.
Correct. VPC sharing eliminates the need for inter-VPC peering connections because participating accounts can directly deploy resources into the shared VPC.
- C. Correct.
Correct. Participating accounts can independently manage security groups and network ACLs for the resources they deploy, providing flexibility and control.
- D. Incorrect.
Incorrect. While resources in private subnets can be shared, public subnets are not supported for VPC sharing.
- E. Incorrect.
Incorrect. VPC sharing is limited to the same AWS Region; it does not support sharing VPCs across Regions.