Which combination of steps will meet these requirements?

By:
In: SAP-C02
Tagged:
With: 1 Comment
A company has 50 AWS accounts that are members of an organization in AWS Organizations.Each account contains multiple VPCs.The company wants to use AWS Transit Gateway to establish connectivity between the VPCs in each member account.Each time a new member account is created, the company wants to automate the process of creating a new VPC and a transit gateway attachment.

Which combination of steps will meet these requirements?

(Choose two.)

From the management account, share the transit gateway with member accounts by using AWS Resource Access Manager.

From the management account, share the transit gateway with member accounts by using an AWS Organizations SCP.

Launch an AWS CloudFormation stack set from the management account that automatically creates a new VPC and a VPC transit gateway attachment in a member account. Associate the attachment with the transit gateway in the management account by using the transit gateway ID.

Launch an AWS CloudFormation stack set from the management account that automatically creates a new VPC and a peering transit gateway attachment in a member account. Share the attachment with the transit gateway in the management account by using a transit gateway service-linked role.

From the management account, share the transit gateway with member accounts by using AWS Service Catalog.

Explanations:

Sharing the transit gateway with member accounts using AWS Resource Access Manager allows those accounts to attach their VPCs to the transit gateway, enabling interconnectivity across the organization.

AWS Organizations Service Control Policies (SCPs) are used for managing permissions within the organization but cannot be used to share a transit gateway, as they do not facilitate resource sharing or connectivity directly.

Launching a CloudFormation stack set from the management account to create a new VPC and a transit gateway attachment automates the setup process in member accounts and associates the attachment with the existing transit gateway.

While launching a CloudFormation stack set to create a new VPC is valid, using a peering transit gateway attachment does not meet the requirement, as the question specifies using a transit gateway attachment, not a peering option.

AWS Service Catalog is not used for sharing transit gateways between accounts. It is primarily for managing and deploying approved AWS resources, not for sharing connectivity resources like transit gateways.

2025-10-12

1 Comment

  1. Kenneth
    Author

    I chart that the answer is:
    From the management account, share the transit gateway with member accounts by using AWS Resource Access Manager.

Leave a Reply

Your email address will not be published. Required fields are marked *

sixteen + eleven =