AWS Certified Solutions Architect – Professional (SAP-C02) — Question 32

A company has 50 AWS accounts that are members of an organization in AWS Organizations. Each account contains multiple VPCs. The company wants to use AWS Transit Gateway to establish connectivity between the VPCs in each member account. Each time a new member account is created, the company wants to automate the process of creating a new VPC and a transit gateway attachment.
Which combination of steps will meet these requirements? (Choose two.)

Answer options

• A. From the management account, share the transit gateway with member accounts by using AWS Resource Access Manager.
• B. From the management account, share the transit gateway with member accounts by using an AWS Organizations SCP.
• C. Launch an AWS CloudFormation stack set from the management account that automatically creates a new VPC and a VPC transit gateway attachment in a member account. Associate the attachment with the transit gateway in the management account by using the transit gateway ID.
• D. Launch an AWS CloudFormation stack set from the management account that automatically creates a new VPC and a peering transit gateway attachment in a member account. Share the attachment with the transit gateway in the management account by using a transit gateway service-linked role.
• E. From the management account, share the transit gateway with member accounts by using AWS Service Catalog.

Correct answer: A, C

Explanation

Option A is correct because AWS Resource Access Manager allows the management account to share the transit gateway with member accounts, enabling connectivity. Option C is also correct as launching a CloudFormation stack set automates the creation of a new VPC and a transit gateway attachment, which is essential for the required setup. The other options either do not facilitate the needed sharing or automate the process effectively.