ANS-C01 practice question 28 of 35

A company has two AWS accounts one for Production and one for Connectivity. A network engineer needs to connect the Production account VPC to a transit gateway in the Connectivity account. The feature to auto accept shared attachments is not enabled on the transit gateway. Which set of steps should the network engineer follow in each AWS account to meet these requirements?

Full set: 291 questions
Answer options
A: 1. In the Production account: Create a resource share in AWS Resource Access Manager for the transit gateway. Provide the Connectivity account ID. Enable the feature to allow external accounts 2. In the Connectivity account: Accept the resource. 3. In the Connectivity account: Create an attachment to the VPC subnets. 4. In the Production account: Accept the attachment. Associate a route table with the attachment.
B: 1. In the Production account: Create a resource share in AWS Resource Access Manager for the VPC subnets. Provide the Connectivity account ID. Enable the feature to allow external accounts. 2. In the Connectivity account: Accept the resource. 3. In the Production account: Create an attachment on the transit gateway to the VPC subnets. 4. In the Connectivity account: Accept the attachment. Associate a route table with the attachment.
C: 1. In the Connectivity account: Create a resource share in AWS Resource Access Manager for the VPC subnets. Provide the Production account ID. Enable the feature to allow external accounts. 2. In the Production account: Accept the resource. 3. In the Connectivity account: Create an attachment on the transit gateway to the VPC subnets. 4. In the Production account: Accept the attachment. Associate a route table with the attachment.
D: 1. In the Connectivity account: Create a resource share in AWS Resource Access Manager for the transit gateway. Provide the Production account ID Enable the feature to allow external accounts. 2. In the Production account: Accept the resource. 3. In the Production account: Create an attachment to the VPC subnets. 4. In the Connectivity account: Accept the attachment. Associate a route table with the attachment. Correct answer
Correct Answer:
D. 1. In the Connectivity account: Create a resource share in AWS Resource Access Manager for the transit gateway. Provide the Production account ID Enable the feature to allow external accounts. 2. In the Production account: Accept the resource. 3. In the Production account: Create an attachment to the VPC subnets. 4. In the Connectivity account: Accept the attachment. Associate a route table with the attachment.
Explanation

The correct procedure for a cross-account Transit Gateway (TGW) attachment, when auto-accept is disabled, follows a specific sequence. First, the TGW owner (Connectivity account) must share the TGW resource with the target account (Production) using AWS Resource Access Manager (RAM). Second, the Production account must accept this resource share. Third, the Production account can now create a VPC attachment to the shared TGW. Finally, because auto-accept is off, the TGW owner (Connectivity account) must manually accept the pending attachment request to complete the connection.

Why Incorrect

A: The resource share must be initiated by the resource owner (Connectivity account), not the consumer (Production account). B: The resource that needs to be shared is the Transit Gateway itself, not the VPC subnets in the other account. C: This option incorrectly states that the VPC subnets should be shared. The Transit Gateway is the central resource that must be shared.

References

- AWS Documentation, "AWS Transit Gateway User Guide", section "Share a transit gateway". This guide explicitly outlines the steps: 1. Owner creates a resource share. 2. Participant joins the share. 3. Participant creates an attachment. 4. Owner accepts the attachment.

- AWS Documentation, "AWS Resource Access Manager User Guide", section "Working with shared AWS resources". This document describes the consumer's responsibility to accept a resource share invitation before they can use the shared resource.

Keep practicing

Take the free ANS-C01 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test

More questions

Other ANS-C01 practice questions

Scroll to Top