A company has many AWS accounts and uses AWS Organizations to manage all of them. A solutions architect must implement a solution that the company can use to share a common network across multiple accounts. The company’s infrastructure team has a dedicated infrastructure account that has a VPC. The infrastructure team must use this account to manage the network. Individual accounts cannot have the ability to manage their own networks. However, individual accounts must be able to create AWS resources within subnets. Which combination of actions should the solutions architect perform to meet these requirements? (Choose two.)
Select 2 answers.
Marked answer: D
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose BD1
Enabling resource sharing will allow to implement sharing of infra with other users through their subnets.
Chose BD4
❌ Why A is not necessary in this scenario: A transit gateway is useful if: You have multiple VPCs to connect You need centralized routing between VPCs But in this scenario: The question only talks about sharing one VPC from the infrastructure account There's no requirement for VPC-to-VPC communication
Chose BD1
RAM sharing across AWS Organizations (must be enabled once). d. is how you share subnets so other can deploy resources into the VPC without managing networking.
