Practice Test 1 | AWS Certified Solutions Architect Associate | SAA-C03 | Dumps | Mock Test
You are part of the IT sector at the finance department of your country. Your organization has implemented AWS Organizations for each internal department, and you have access to the master account. You need to manage Amazon EC2 Dedicated Hosts centrally, and share the host’s instance capacity with other AWS accounts in the AWS Organizations. How can you accomplish this in the easiest way?
A. Use AWS Resource Access Manager to manage the EC2 Dedicated Hosts centrally and share them with other member accounts.
B. Use service control policies to share the EC2 Dedicated Hosts in the member accounts.
C. Use AWS Control Tower.
D. Create IAM policies with conditions and assign them to users in every member account.
Explanation:
Correct Answer: A
- Option A is CORRECT. With AWS Resource manager, you can share resources with other AWS accounts joined to your AWS Organizations reducing the operational overhead. More details: https://docs.aws.amazon.com/ram/latest/userguide/shareable.html#shareable-ec2.
- Option B is incorrect. SCP is not a service to share resources such as EC2 Dedicated Hosts with other accounts within the AWS Organizations.
- Option C is incorrect. AWS Control Tower is used to do automated deployments in multi-account environments.
- Option D is incorrect. Creating IAM policies is not used to manage and share resources within the AWS Organizations.
Comments are closed, but trackbacks and pingbacks are open.