Question wording:

[mddreeves]

In this question, shouldn’t the correct answer read:

“Enable automatic acceptance for the transit gateway attachments in the “primary IT operations” account and share the transit gateway with the staging account using AWS Resource Access Manager (AWS RAM).”

….The TGW exists in the primary IT operations account, correct?

An international enterprise is leveraging AWS Organizations for the administration of its various AWS accounts. Their primary IT operations account has a VPC where multiple applications are deployed. This VPC is linked to a transit gateway. As part of a new initiative, they have established a staging server environment in a staging account that requires connectivity to the applications in the primary IT operations account.

Due to the nature of the staging process, resources in the staging account will be frequently terminated and re-provisioned. The staging team also requires the capability to reconfigure their connection to the primary IT operations account as needed.

What approach would satisfy these conditions?

1. Enable automatic acceptance for the transit gateway attachments in the staging account and create a VPC endpoint in the staging account for each application in the primary IT operations account.

2. Create a new transit gateway from the staging account to the primary IT operations account for each connection. For each connection, send a peering request from the staging account’s transit gateway to the primary IT operations account’s transit gateway.

3. Establish Direct Connect connections from the staging account to each application in the primary IT operations account.

4. Enable automatic acceptance for the transit gateway attachments in the staging account and share the transit gateway with the staging account using AWS Resource Access Manager (AWS RAM). (CORRECT)