DOP-C02 Question 93
Single answerYour team is implementing Infrastructure as Code (IaC) for a complex multi-region application on AWS. The application requires a combination of compute, storage, networking, and IAM resources. You need a tool that supports declarative syntax, has native integration with AWS services, and enables resource provisioning across multiple AWS accounts. Which of the following options is the MOST suitable tool for this use case?
- A
AWS CloudFormation
- B
Terraform
- C
AWS Elastic Beanstalk
- D
Ansible
Show answer and explanation
Correct answer: A
Explanation
AWS CloudFormation is the most suitable tool for this scenario because it is an AWS-native IaC service that allows you to define, provision, and manage AWS infrastructure using declarative templates. It supports advanced features like cross-account and cross-region stack management, which are critical for managing complex applications across multiple AWS accounts and regions. While tools like Terraform, Elastic Beanstalk, and Ansible have their use cases, they do not align as closely with the specific requirements outlined in the question.
- A. Correct.
AWS CloudFormation is a native AWS IaC tool that uses declarative syntax to define and provision resources. It supports multi-region and multi-account deployments and integrates seamlessly with AWS services, making it the most suitable choice for this scenario.
- B. Incorrect.
Terraform is a popular IaC tool that supports AWS and other cloud providers. However, it is not natively integrated with AWS and does not provide some of the AWS-specific features like drift detection or AWS-native resource policies.
- C. Incorrect.
AWS Elastic Beanstalk is a Platform as a Service (PaaS) solution for deploying applications. While it abstracts infrastructure management, it is not a dedicated IaC tool and does not offer detailed control over individual AWS resources.
- D. Incorrect.
Ansible is a configuration management tool that can provision resources with additional plugins, but it is not specialized for IaC on AWS and lacks the native integration and declarative syntax required for this scenario.