SOA-C02 Question 138
Select 3An organization wants to deploy an application stack across two AWS Regions and manage those resources in multiple AWS accounts. The organization also wants to ensure that permissions are securely granted to the required accounts for resource access. Which combination of services should you use to achieve this?
- A
AWS CloudFormation StackSets
- B
AWS Resource Access Manager (AWS RAM)
- C
Amazon S3 Cross-Region Replication
- D
IAM Cross-Account Roles
- E
AWS Direct Connect
Show answer and explanation
Correct answers: A, B, D
Explanation
To provision resources across multiple AWS Regions and accounts, you need AWS CloudFormation StackSets for deployment, AWS Resource Access Manager (AWS RAM) for securely sharing resources across accounts, and IAM Cross-Account Roles for granting permissions between accounts. These services work together to securely and efficiently manage infrastructure in a multi-account, multi-region environment.
- A. Correct.
AWS CloudFormation StackSets allow you to deploy CloudFormation stacks across multiple AWS accounts and Regions in a single operation, making it ideal for managing application stacks across accounts and Regions.
- B. Correct.
AWS Resource Access Manager (AWS RAM) enables you to securely share resources such as VPCs, subnets, and other supported resources across AWS accounts, making it a necessary component in a multi-account setup.
- C. Incorrect.
Amazon S3 Cross-Region Replication is used for replicating objects in S3 buckets across Regions, but it does not help with provisioning or managing infrastructure across accounts and Regions.
- D. Correct.
IAM Cross-Account Roles enable secure access between AWS accounts by allowing resources in one account to assume roles in another account, which is essential for managing resources in a multi-account environment.
- E. Incorrect.
AWS Direct Connect is a network service that provides a dedicated connection between on-premises environments and AWS, but it is not used for provisioning or managing resources across Regions and accounts.