ANS-C01 Question 170
Select 3An organization uses multiple AWS accounts for different teams within their company. To optimize resource sharing and minimize administrative overhead, the company decides to use VPC sharing. Which of the following are true about the capabilities and advantages of VPC sharing?
- A
Participants in a shared VPC can create and manage subnets in the shared VPC.
- B
Participants can deploy resources such as EC2 instances into subnets shared with them by the VPC owner.
- C
The owner of the shared VPC retains full control over the shared VPC and its associated resources.
- D
VPC sharing reduces the need for inter-VPC peering within the same AWS account.
- E
Resources deployed into a shared VPC by participants are billed to the participant's account, not the VPC owner's account.
Show answer and explanation
Correct answers: B, C, E
Explanation
VPC sharing allows multiple AWS accounts to share a single VPC, enabling efficient resource sharing and management while reducing administrative overhead. The VPC owner retains control over the VPC and delegates access to specific subnets to participant accounts. Participants can deploy resources into the shared subnets, and the billing for those resources is attributed to the participant's account, not the VPC owner's account.
- A. Incorrect.
Participants in a shared VPC cannot create or manage subnets. Only the VPC owner has the ability to create and manage subnets within the shared VPC.
- B. Correct.
This is correct. Participants in a shared VPC can deploy resources like EC2 instances into subnets that are shared with them by the VPC owner.
- C. Correct.
This is correct. The owner of the shared VPC retains full control over the VPC and can manage permissions for participants.
- D. Incorrect.
While VPC sharing reduces the need for inter-VPC peering across AWS accounts, it does not directly reduce the need for peering within the same AWS account since VPC sharing is primarily designed for cross-account sharing.
- E. Correct.
This is correct. Resources deployed into a shared VPC by participants are billed to the participant's account, ensuring clear separation of costs.