AmazonAmazon Advanced Networking Specialty ANS-C01 Certification·EN·Updated 3 Aug 2026
A company has a Production account and a Connectivity account. The transit gateway is in the Connectivity account and the auto-accept shared attachments feature is disabled. A network engineer must connect the Production VPC to the transit gateway. What sequence of steps should be performed across the accounts to accomplish this?
Choose an answer
Tap an option to check your answer.
Correct answer: 1. In the Connectivity account: Create a resource share in AWS Resource Access Manager for the transit gateway. Provide the Production account ID. Enable the feature to allow external accounts. 2. In the Production account: Accept the resource. 3. In the Production account: Create an attachment to the VPC subnets. 4. In the Connectivity account: Accept the attachment. Associate a route table with the attachment..
Why this is the answer
The correct sequence involves sharing the Transit Gateway from the Connectivity account (where it resides) to the Production account. This allows the Production account to then create an attachment to its VPC. Since auto-accept is disabled, the Connectivity account must explicitly accept this attachment.
Option 1 is incorrect because the resource share is created in the Production account for the transit gateway, which is not owned by the Production account.
Option 2 is incorrect because the resource share should be for the Transit Gateway, not the VPC subnets, and the attachment is created in the wrong account.
Option 3 is incorrect because the resource share is for the VPC subnets instead of the Transit Gateway.