SCS-C02 Question 461
Single answerYour company is managing multiple AWS accounts as part of an AWS Organizations setup. You need to enforce consistent IAM role configurations, deploy specific EC2 launch templates, and ensure all accounts use a uniform S3 bucket policy for compliance. Which AWS service or feature should you use to centrally manage, deploy, and version these configurations across all accounts?
- A
AWS CloudFormation StackSets
- B
AWS Systems Manager Parameter Store
- C
AWS Control Tower
- D
AWS Config Aggregators
Show answer and explanation
Correct answer: A
Explanation
AWS CloudFormation StackSets is the most appropriate solution for centrally managing and deploying resources across multiple AWS accounts in an AWS Organizations setup. It ensures consistent deployment and versioning of configurations like IAM roles, EC2 templates, and S3 bucket policies, aligning with compliance and operational requirements.
- A. Correct.
AWS CloudFormation StackSets allows you to centrally manage, deploy, and update resources across multiple AWS accounts and regions. It supports consistent configuration and versioning of services like IAM roles, EC2 templates, and S3 policies.
- B. Incorrect.
AWS Systems Manager Parameter Store is used for storing and managing configuration data and secrets, but it does not provide centralized deployment or versioning across AWS accounts.
- C. Incorrect.
AWS Control Tower helps establish and govern multi-account environments, but it does not manage specific service configurations like IAM roles or EC2 launch templates.
- D. Incorrect.
AWS Config Aggregators are used to aggregate and analyze resource compliance data from multiple accounts, but they do not handle deployment or versioning of configurations.