ANS-C01 Question 225
Select 3Your organization has multiple AWS accounts managed through AWS Organizations. You have created a shared Amazon VPC in a central networking account and attached a Transit Gateway to it. The goal is to allow other member accounts to use this Transit Gateway to communicate with their own VPCs. Which steps should you take to achieve this setup?
- A
Share the Transit Gateway resource with member accounts using AWS Resource Access Manager (AWS RAM).
- B
Ensure the member accounts accept the Transit Gateway resource share invitation in AWS RAM.
- C
Attach each member account’s VPC to the Transit Gateway using a Transit Gateway attachment.
- D
Enable AWS Direct Connect Gateway to route traffic between the central account and member accounts.
- E
Create a Route 53 private hosted zone in the central account and associate it with the member accounts.
Show answer and explanation
Correct answers: A, B, C
Explanation
To share a Transit Gateway in a multi-account environment, AWS RAM is used to share the resource with other accounts, and those accounts must accept the share. Afterward, each account’s VPCs need to be attached to the Transit Gateway to enable communication. AWS Direct Connect Gateway and Route 53 private hosted zones are unrelated to this specific use case.
- A. Correct.
Correct: AWS Resource Access Manager (AWS RAM) is used to share resources such as Transit Gateways across accounts in an AWS Organization.
- B. Correct.
Correct: For shared resources to be functional, member accounts must accept the resource share invitation in AWS RAM.
- C. Correct.
Correct: VPCs must be attached to the Transit Gateway using Transit Gateway attachments to enable connectivity.
- D. Incorrect.
Incorrect: AWS Direct Connect Gateway is unrelated to this scenario. It is used for hybrid connectivity between AWS and on-premises environments, not for connecting VPCs across accounts.
- E. Incorrect.
Incorrect: While Route 53 private hosted zones can be used for DNS resolution within a VPC, they are not required for sharing or connecting VPCs via a Transit Gateway.