A company wants to isolate its workloads by creating an AWS account for each workload. The company needs a solution that centrally manages networking components for the workloads. The solution also…

Question

Options

• AUse AWS Control Tower to deploy accounts. Create a networking account that has a VPC with
• BUse AWS Organizations to deploy accounts. Create a networking account that has a VPC with
• CUse AWS Control Tower to deploy accounts. Deploy a VPC in each workload account. Configure
• DUse AWS Organizations to deploy accounts. Deploy a VPC in each workload account. Configure

• A
  43% (16)
• B
  8% (3)
• C
  16% (6)
• D
  32% (12)

Explanation

AWS Control Tower: Provides a managed service to set up and govern a secure, multi-account AWS environment based on AWS best practices. It automates the setup of AWS Organizations and applies security controls (guardrails). Networking Account: Create a centralized networking account that includes a VPC with both private and public subnets. This centralized VPC will manage and control the networking resources. AWS Resource Access Manager (AWS RAM): Use AWS RAM to share the subnets from the networking account with the other workload accounts. This allows different workload accounts to utilize the shared networking resources without the need to manage their own VPCs. Operational Efficiency: Using AWS Control Tower simplifies the setup and governance of multiple AWS accounts, while AWS RAM facilitates centralized management of networking resources, reducing operational overhead and ensuring consistent security and compliance.

No community discussion yet for this question.