ANS-C01 Question 253
Single answerYour organization has multiple AWS accounts managed under AWS Organizations. You want to share a VPC from one account with another account in the same organization to allow workload deployment in the shared VPC. Which method should you use to accomplish this efficiently while maintaining security and control?
- A
Use AWS Resource Access Manager (RAM) to share the VPC with the target account.
- B
Create a VPC peering connection between the accounts and configure route tables for communication.
- C
Use an AWS Transit Gateway to connect the VPCs across accounts.
- D
Manually create identical VPCs in both accounts and use private IP addresses for communication.
Show answer and explanation
Correct answer: A
Explanation
The most efficient method to share a VPC across accounts in the same AWS Organization is to use AWS Resource Access Manager (RAM). RAM allows resource sharing without the need for peering connections or additional network configurations, ensuring simplicity and security. Other methods, like VPC peering or Transit Gateway, are better suited for connecting separate VPCs rather than sharing a single VPC.
- A. Correct.
This is correct. AWS RAM allows you to securely share a VPC with other AWS accounts in the same organization. It is the most efficient and scalable way to share VPC resources while maintaining centralized control.
- B. Incorrect.
This is incorrect. While VPC peering can connect VPCs across accounts, it is not as scalable or efficient as AWS RAM for sharing a single VPC within an organization.
- C. Incorrect.
This is incorrect. AWS Transit Gateway is used for complex network topologies and interconnecting multiple VPCs, but it is not the ideal solution for sharing a single VPC.
- D. Incorrect.
This is incorrect. Manually creating identical VPCs in both accounts is operationally complex, error-prone, and does not provide a true shared resource model.