ANS-C01 Question 169
Select 2Your organization has multiple AWS accounts under a single AWS Organization. To simplify resource management, you decide to use VPC sharing to allow a development team in one account (Account A) to deploy resources into a VPC owned by another account (Account B). Which of the following statements are true about VPC sharing?
- A
Resources launched into the shared VPC by Account A are fully managed and billed to Account A.
- B
Security groups associated with the shared VPC can be modified by both Account A and Account B.
- C
Account B, as the VPC owner, retains control over the VPC routing tables, subnets, and network ACLs.
- D
Elastic IP addresses allocated in the shared VPC can be assigned to resources by both Account A and Account B.
- E
VPC sharing allows Account A to create additional subnets within the shared VPC.
Show answer and explanation
Correct answers: A, C
Explanation
VPC sharing allows multiple AWS accounts within an organization to use the same VPC, improving resource management and reducing inter-VPC data transfer costs. The VPC owner retains control over the VPC's core network configuration and is responsible for managing security groups, subnets, and routing tables. However, participating accounts are responsible for managing and paying for the resources they deploy into the shared VPC. This ensures a clear separation of responsibilities while enabling efficient resource sharing across accounts.
- A. Correct.
Correct. Account A is responsible for managing and paying for the resources it deploys into the shared VPC, even though the VPC is owned by Account B.
- B. Incorrect.
Incorrect. Only the VPC owner (Account B) has the ability to modify security groups associated with the VPC.
- C. Correct.
Correct. The VPC owner (Account B) retains full control over core network configurations like routing tables, subnets, and network ACLs.
- D. Incorrect.
Incorrect. Elastic IP addresses are managed by the owner of the VPC (Account B) and cannot be independently assigned by Account A.
- E. Incorrect.
Incorrect. Only the VPC owner (Account B) can create and manage subnets in the shared VPC.