CLF-C02 Practice Question 123: Cross Account Sharing
AWS Certified Cloud Practitioner (CLF-C02) · Test 13 · question 3 of 10
A central networking team owns a VPC and its subnets in a shared-services account in AWS Organizations. Application teams in other accounts in the organization need to launch their resources into those subnets, instead of each team creating and maintaining a duplicate VPC. The networking team wants to keep ownership and control of the subnets. What should it use?
Show answer and explanation
Answer:
AWS RAM lets you securely share resources across AWS accounts, including with all accounts in an organization or with specific organizational units. You create a resource once and share it, which eliminates the need to provision duplicate resources in every account and reduces operational overhead. When a subnet is shared through AWS RAM, users in the other accounts see it in their own VPC console as if it were in their account, while the owning account keeps full ownership of the resource.
Options A and B both *connect* VPCs to one another. Each application team would still have to create and maintain its own VPC, which is the duplication the company wants to avoid. Option D would let people sign in to the networking account itself. Their resources would then be created in that account rather than their own, and the networking team would lose the separation between teams.
Reference: What is AWS Resource Access Manager?