A network team owns a central Transit Gateway in a shared services account and wants member accounts to attach their VPCs to it, without copying the gateway into each account. Which service enables this?
Show answer and explanation
Answer: D
AWS Resource Access Manager lets an owner account share eligible resources, including Transit Gateways, subnets, and other shared components, with other accounts or an entire organization. Consumers use the shared resource without owning a duplicate. This keeps networking centrally managed while letting each account attach its own VPCs. The other services handle audit evidence, data discovery, or product catalogs.
Why the other options are wrong
- A. Audit Manager assembles evidence for compliance assessments. It does not share networking components between accounts or let them attach to a common gateway.
- B. Macie discovers and classifies sensitive data in S3. It has no function in sharing network infrastructure across accounts.
- C. Service Catalog distributes approved infrastructure templates to end users. It deploys copies of products, which is the duplication the team wants to avoid, rather than a live share of a Transit Gateway.