SCS-C02 Question 460
Select 2Your organization uses multiple AWS accounts for different teams and projects. To ensure consistent deployment of security controls and configurations across all accounts, you need a solution that allows centralized management, deployment of AWS services, and versioning of configurations. Which service or combination of services can help you achieve this?
- A
AWS Systems Manager State Manager
- B
AWS CloudFormation StackSets
- C
AWS Config Aggregator
- D
AWS Control Tower
- E
AWS Secrets Manager
Show answer and explanation
Correct answers: B, D
Explanation
AWS CloudFormation StackSets and AWS Control Tower together provide a robust solution for centralized management, deployment, and versioning of AWS services. StackSets enables deploying infrastructure as code across multiple accounts and regions, while Control Tower sets up a multi-account environment with guardrails and governance, ensuring consistency and compliance across all accounts.
- A. Incorrect.
AWS Systems Manager State Manager is primarily used for automating the configuration of EC2 instances and other resources, but it doesn’t provide centralized deployment and versioning of AWS services across multiple accounts.
- B. Correct.
AWS CloudFormation StackSets allows you to deploy and manage CloudFormation templates across multiple AWS accounts and regions, making it ideal for centralized deployment and versioning.
- C. Incorrect.
AWS Config Aggregator is a service used to aggregate and analyze AWS Config data from multiple accounts and regions but does not handle centralized deployment or versioning of AWS services.
- D. Correct.
AWS Control Tower provides a centralized management platform for setting up and governing multi-account AWS environments. It can ensure consistent configurations and policies across accounts, complementing deployment mechanisms like StackSets.
- E. Incorrect.
AWS Secrets Manager is used for managing secrets like API keys, database credentials, etc., but it cannot handle centralized management, deployment, or versioning of AWS services.