SAP-C02 Question 363
Select 3A company has a multi-account AWS environment managed using AWS Organizations. The operations team is struggling to monitor and manage resource usage across accounts, which is leading to inefficiencies in operations and challenges in detecting anomalies. As an AWS Certified Solutions Architect - Professional, how can you improve the overall operational excellence of the environment?
- A
Implement AWS Config across all accounts and aggregate resource compliance data into a central account.
- B
Use AWS CloudFormation StackSets to enforce consistent resource configurations across accounts.
- C
Set up Amazon Macie to monitor sensitive data usage across all accounts.
- D
Deploy AWS CloudTrail organization trails to a central S3 bucket for unified logging and monitoring.
- E
Enable AWS Trusted Advisor for all accounts to provide real-time recommendations on cost optimization, performance, and security.
Show answer and explanation
Correct answers: A, B, D
Explanation
To improve operational excellence in a multi-account AWS environment, you need tools and strategies that enhance visibility, enforce consistency, and streamline monitoring. AWS Config provides compliance tracking, AWS CloudFormation StackSets enforces consistent configurations, and AWS CloudTrail ensures unified logging for anomaly detection. Together, these solutions address the operational inefficiencies highlighted in the scenario.
- A. Correct.
Correct. AWS Config can help track resource configurations and ensure compliance across accounts, which improves operational visibility and governance.
- B. Correct.
Correct. AWS CloudFormation StackSets enable you to deploy consistent infrastructure configurations across multiple accounts, reducing operational complexity.
- C. Incorrect.
Incorrect. Amazon Macie is primarily used for identifying and protecting sensitive data. While useful for security, it does not directly impact operational excellence in this scenario.
- D. Correct.
Correct. AWS CloudTrail organization trails provide unified logging and auditing across accounts, which enhances anomaly detection and operational efficiency.
- E. Incorrect.
Incorrect. AWS Trusted Advisor provides valuable recommendations but does not directly address the need for centralized monitoring and operational consistency as described in the scenario.