SOA-C02 Question 137
Select 3Your organization operates multiple AWS accounts and requires a solution to deploy a consistent set of IAM roles and permissions across all accounts in multiple AWS Regions. The solution must also allow secure sharing of specific resources, such as Amazon S3 buckets, across accounts. Which combination of AWS services should you use to meet these requirements?
- A
AWS CloudFormation StackSets
- B
AWS Resource Access Manager (AWS RAM)
- C
AWS Direct Connect
- D
AWS Identity and Access Management (IAM) cross-account roles
- E
AWS Transfer Family
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the requirements of consistent deployment of IAM roles and permissions across accounts and Regions, AWS CloudFormation StackSets is the ideal choice for infrastructure automation. For secure resource sharing, AWS Resource Access Manager (AWS RAM) is the appropriate service. Finally, IAM cross-account roles enable secure access to resources, completing the solution. Other options, such as AWS Direct Connect and AWS Transfer Family, do not address the stated requirements.
- A. Correct.
AWS CloudFormation StackSets is used to deploy and manage CloudFormation stacks across multiple AWS accounts and Regions, which is essential for consistent deployment of IAM roles and permissions.
- B. Correct.
AWS Resource Access Manager (AWS RAM) allows you to securely share AWS resources, such as S3 buckets, across accounts, which is a requirement in this scenario.
- C. Incorrect.
AWS Direct Connect is a networking service that does not apply to deploying IAM roles or sharing resources across accounts.
- D. Correct.
AWS Identity and Access Management (IAM) cross-account roles enable secure access to resources in other accounts and align with the requirement to manage permissions across multiple accounts.
- E. Incorrect.
AWS Transfer Family is a managed file transfer service and is not relevant for deploying IAM roles or sharing resources in this scenario.