AWS Certified Solutions Architect - Professional
Comments
Loading comments...
Ultimate access to all questions.
A company manages multiple AWS accounts using AWS Organizations and hosts applications in a VPC within their shared services account. They have attached a transit gateway to this VPC. The company is developing a new feature and requires a development environment that accesses these applications. Resources in the development account will be frequently deleted and recreated. The company desires to empower the development team to reestablish their connection to the shared services account as needed. Which solution meets these requirements?
A
Create a transit gateway in the development account and initiate a transit gateway peering request to the shared services account. Configure the shared services transit gateway to automatically accept peering connections.
B
Enable automatic acceptance for the transit gateway in the shared services account. Utilize AWS Resource Access Manager (AWS RAM) to share the transit gateway resource from the shared services account with the development account. Accept the shared resource in the development account and create a transit gateway attachment.
C
Enable automatic acceptance for the transit gateway in the shared services account. Establish a VPC endpoint and use the endpoint policy to grant permissions on the VPC endpoint for the development account. Configure the endpoint service to automatically accept connection requests and provide the endpoint details to the development team.
D
Create an Amazon EventBridge rule that triggers an AWS Lambda function to accept the transit gateway attachment when the development account requests an attachment. Use AWS Network Manager to share the transit gateway from the shared services account with the development account and accept the shared transit gateway in the development account.