ANS-C01 Question 254
Single answerA company operates in a multi-account setup using AWS Organizations and needs to share a VPC across multiple accounts to allow resources in these accounts to communicate with each other. What is the best method to achieve this while minimizing operational overhead?
- A
Use AWS Resource Access Manager (RAM) to share the VPC with other accounts in the organization.
- B
Set up VPC peering between the VPC and the VPCs in each account.
- C
Create a Transit Gateway and attach the VPC and other accounts' VPCs to the Transit Gateway.
- D
Use AWS Direct Connect to establish private connectivity between the accounts.
Show answer and explanation
Correct answer: A
Explanation
The most efficient and least complex method for sharing a VPC across multiple accounts in an AWS Organization is to use AWS Resource Access Manager (RAM). RAM simplifies the process by allowing you to share resources like VPCs directly with other accounts, avoiding the need for complex networking setups such as VPC peering or Transit Gateway configurations. It also integrates seamlessly with AWS Organizations, making it an ideal solution for this scenario.
- A. Correct.
This is the correct answer. AWS Resource Access Manager (RAM) allows you to share a VPC with other AWS accounts in your organization without needing to set up additional networking components. This approach minimizes operational overhead.
- B. Incorrect.
While VPC peering could connect the VPCs, it does not scale well in environments with multiple accounts and VPCs due to the need for many peering connections. Additionally, it does not simplify resource sharing within an organization.
- C. Incorrect.
A Transit Gateway could be used, but it is a more complex and costly solution compared to using AWS RAM for VPC sharing. Transit Gateway is better suited for more complex network topologies.
- D. Incorrect.
AWS Direct Connect is used for establishing private connectivity between on-premises environments and AWS, not for inter-account VPC sharing within AWS.