ANS-C01 Question 260
Single answerYou are tasked with creating and managing a secure, repeatable, and automated network infrastructure deployment for a multi-account AWS environment. The solution must allow for version control, automation of resource provisioning, and integration with AWS Identity and Access Management (IAM) for permissions management. Which approach should you use?
- A
Use AWS CloudFormation with cross-account roles and stack sets to deploy and manage the infrastructure across accounts.
- B
Manually configure the resources in each account using the AWS Management Console and document the changes for future reference.
- C
Use Amazon EC2 Auto Scaling groups to deploy the required infrastructure across accounts.
- D
Write custom scripts with AWS SDKs to provision resources, and store these scripts in a private Git repository.
Show answer and explanation
Correct answer: A
Explanation
AWS CloudFormation is the most suitable tool for infrastructure automation in a multi-account environment as it provides a structured, repeatable, and automated approach to resource provisioning. By integrating cross-account roles and stack sets, CloudFormation allows centralized management of infrastructure across multiple accounts with proper version control and IAM integration, meeting all the requirements of the scenario. Other options either lack scalability, repeatability, or the necessary automation capabilities.
- A. Correct.
AWS CloudFormation with cross-account roles and stack sets is the correct solution for automated, repeatable infrastructure deployment in a multi-account environment. CloudFormation provides version control, automation, and integration with IAM, and stack sets allow for consistent deployment across accounts.
- B. Incorrect.
Manually configuring resources in each account is error-prone, not scalable, and does not meet the requirement for repeatability or automation.
- C. Incorrect.
Amazon EC2 Auto Scaling is used for managing compute resources and does not provide the comprehensive infrastructure automation required in this scenario.
- D. Incorrect.
Using custom scripts with AWS SDKs may provide automation, but it requires significant maintenance effort, lacks built-in version control, and does not leverage IAM integration and multi-account management capabilities as effectively as AWS CloudFormation.