Your team has just created an AMI out of an EC2 Instance.
You need to share it with another account.
The account belongs to the same company.
Which of the following is the right way to ensure the other account has access to the AMI?
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: A.
The AWS Documentation mentions the following.
You can share an AMI with specific AWS accounts without making the AMI public.
All you need are the AWS account IDs.
AMIs are a regional resource.
Therefore, sharing an AMI makes it available in that region.
To make an AMI available in a different region, copy the AMI to the region and then share it.
All of the other options are not valid since these are not secure ways to share the AMI.
For more information on sharing the AMI, please refer to the below URL-
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sharingamis-explicit.htmlThe correct way to share an Amazon Machine Image (AMI) with another AWS account belonging to the same company is to share the AMI with the specific AWS account.
Option A is the correct answer because it allows you to share the AMI with specific AWS accounts by specifying the account ID or alias. This ensures that only the intended account has access to the AMI. You can also specify permissions to control how the other account can use the AMI.
Option B, marking the AMI as public, would make the AMI accessible to anyone on the internet, which is not recommended for security reasons. This option should only be used when you want to make the AMI available to the general public.
Option C, selling the AMI in the AWS Marketplace, is not appropriate for this scenario, as the other account belongs to the same company. The AWS Marketplace is designed for selling AMIs to customers outside of your organization.
Option D, making the AMI a paid AMI, is also not appropriate for this scenario. Making the AMI a paid AMI would require the other account to pay to access the AMI, which is unnecessary if the other account belongs to the same company.
In summary, the correct way to share an AMI with another AWS account belonging to the same company is to share the AMI with the specific AWS account.