ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 67 - SAP-C02 discussion

Report
Export

A company has its cloud infrastructure on AWS A solutions architect needs to define the infrastructure as code. The infrastructure is currently deployed in one AWS Region. The company's business expansion plan includes deployments in multiple Regions across multiple AWS accounts

What should the solutions architect do to meet these requirements?

A.
Use AWS CloudFormation templates Add IAM policies to control the various accounts Deploy the templates across the multiple Regions
Answers
A.
Use AWS CloudFormation templates Add IAM policies to control the various accounts Deploy the templates across the multiple Regions
B.
Use AWS Organizations Deploy AWS CloudFormation templates from the management account Use AWS Control Tower to manage deployments across accounts
Answers
B.
Use AWS Organizations Deploy AWS CloudFormation templates from the management account Use AWS Control Tower to manage deployments across accounts
C.
Use AWS Organizations and AWS CloudFormation StackSets Deploy a CloudFormation template from an account that has the necessary IAM permissions
Answers
C.
Use AWS Organizations and AWS CloudFormation StackSets Deploy a CloudFormation template from an account that has the necessary IAM permissions
D.
Use nested stacks with AWS CloudFormation templates Change the Region by using nested stacks
Answers
D.
Use nested stacks with AWS CloudFormation templates Change the Region by using nested stacks
Suggested answer: C

Explanation:

https://aws.amazon.com/blogs/aws/new-use-aws-cloudformation-stacksets-for-multiple-accounts-in-an-aws-organization/

AWS Organizations allows the management of multiple AWS accounts as a single entity and AWS CloudFormation StackSets allows creating, updating, and deleting stacks across multiple accounts and regions in an organization. This solution allows creating a single CloudFormation template that can be deployed across multiple accounts and regions, and also allows for the management of access and permissions for the different accounts through the use of IAM roles and policies in the management account.

asked 16/09/2024
Marcos Losa Torviso
53 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first