SCS-C02 Question 444
Select 3An organization wants to automate the deployment of their cloud resources across multiple AWS accounts and regions to ensure security and consistency. They also want to minimize the risks of human error during deployments. Which combination of services and strategies should be used to achieve this goal?
- A
Use AWS CloudFormation StackSets to deploy infrastructure templates across multiple accounts and regions.
- B
Manually manage resource creation in each account using the AWS Management Console.
- C
Use AWS CodePipeline with AWS CodeBuild to automate CI/CD pipelines for infrastructure deployments.
- D
Implement Service Control Policies (SCPs) in AWS Organizations to enforce deployment restrictions.
- E
Store infrastructure templates in an S3 bucket and share the bucket publicly for all accounts to access.
Show answer and explanation
Correct answers: A, C, D
Explanation
To implement a secure and consistent deployment strategy for cloud resources, you should leverage automation and governance tools provided by AWS. AWS CloudFormation StackSets ensure consistent deployment across multiple accounts and regions. AWS CodePipeline and AWS CodeBuild automate the deployment process, reducing human error. SCPs in AWS Organizations enforce security and compliance during deployment. Avoid manual resource management and insecure practices like sharing templates publicly.
- A. Correct.
Correct. AWS CloudFormation StackSets allow you to deploy and manage infrastructure templates consistently across multiple AWS accounts and regions, reducing the risk of human error.
- B. Incorrect.
Incorrect. Manually managing resources is error-prone and does not ensure consistency or automation, which goes against the goal of a secure and consistent deployment strategy.
- C. Correct.
Correct. AWS CodePipeline with AWS CodeBuild can automate the CI/CD process for deploying infrastructure as code, ensuring consistent and repeatable deployments.
- D. Correct.
Correct. Service Control Policies (SCPs) in AWS Organizations can enforce guardrails and ensure resources are deployed securely and within compliance boundaries.
- E. Incorrect.
Incorrect. Storing templates in a publicly accessible S3 bucket poses a security risk and does not align with best practices for secure deployments.