DOP-C02 Question 88
Single answerYour company is building a multi-account AWS environment to support multiple teams and applications. To ensure consistency and reusability, you are tasked with defining a cloud infrastructure solution that allows for automated provisioning of accounts with pre-configured resources (e.g., VPCs, IAM roles, logging). Additionally, the solution must enable lifecycle management to apply updates to all accounts efficiently. Which approach will best meet these requirements?
- A
Implement AWS CloudFormation StackSets to define reusable infrastructure templates and manage updates across multiple accounts.
- B
Use AWS Elastic Beanstalk to deploy and manage reusable infrastructure components across multiple accounts.
- C
Manually create AWS accounts and use the AWS CLI to provision resources individually in each account.
- D
Leverage AWS Service Catalog to define and provision reusable cloud infrastructure, ensuring lifecycle management through product updates.
Show answer and explanation
Correct answer: A
Explanation
AWS CloudFormation StackSets is the most suitable solution for defining cloud infrastructure and reusable components in a multi-account environment. It allows you to create, update, and manage infrastructure templates centrally, ensuring consistency and lifecycle management across all accounts. Other options, such as Elastic Beanstalk and Service Catalog, are not designed for this specific purpose, and manual provisioning lacks scalability or efficiency.
- A. Correct.
Correct. AWS CloudFormation StackSets allow you to define and deploy reusable infrastructure templates across multiple AWS accounts and regions. They also support central management for updates, making them an ideal solution for this scenario.
- B. Incorrect.
Incorrect. AWS Elastic Beanstalk is designed for deploying and managing applications, not for provisioning reusable infrastructure components or managing multi-account environments.
- C. Incorrect.
Incorrect. Manually creating accounts and provisioning resources with the AWS CLI is inefficient, error-prone, and does not support reusability or centralized lifecycle management.
- D. Incorrect.
Incorrect. While AWS Service Catalog helps define and manage reusable infrastructure, it is more focused on allowing end-users to provision products in their accounts rather than centrally managing infrastructure across multiple accounts in a scalable way.