ANS-C01 Question 262
Single answerYou are designing a highly available architecture for a multi-account AWS environment. Your organization wants to automate the deployment of networking infrastructure, such as VPCs, subnets, and route tables, across multiple accounts and regions. Additionally, they want to ensure consistent configurations and enforce governance policies. Which solution would best meet these requirements?
- A
Use AWS CloudFormation StackSets to define and deploy the networking infrastructure templates across accounts and regions.
- B
Manually create and configure the VPCs, subnets, and route tables in each account and region using the AWS Management Console.
- C
Use AWS OpsWorks to automate the deployment and configuration of the networking infrastructure across multiple accounts.
- D
Leverage AWS Service Catalog to create portfolios of pre-approved VPC templates and share them across accounts.
Show answer and explanation
Correct answer: A
Explanation
AWS CloudFormation StackSets is the most suitable solution for automating the deployment of networking infrastructure across multiple accounts and regions. It allows you to centrally manage and deploy CloudFormation stacks, ensuring consistent configurations and compliance with governance policies. Other options either lack automation capabilities or are not designed for networking infrastructure deployment in a multi-account environment.
- A. Correct.
AWS CloudFormation StackSets is specifically designed for deploying infrastructure templates across multiple AWS accounts and regions, ensuring consistency and enabling automation. It also supports governance and permission models.
- B. Incorrect.
Manually creating and configuring infrastructure is error-prone, time-consuming, and does not meet the requirement for automation or consistent configurations across accounts and regions.
- C. Incorrect.
AWS OpsWorks is primarily used for application lifecycle management and is not designed for deploying networking infrastructure across accounts and regions.
- D. Incorrect.
AWS Service Catalog helps manage portfolios of pre-approved products but does not automate the deployment of networking infrastructure across accounts and regions directly.