SOA-C02 Question 139
Select 2Your organization operates workloads across multiple AWS accounts and Regions. You are tasked with deploying a consistent set of IAM policies and EC2 instances across three accounts in two Regions. Which solution ensures the deployment is automated, scalable, and maintains governance across all environments?
- A
Use AWS CloudFormation StackSets to deploy the IAM policies and EC2 instances across the accounts and Regions.
- B
Manually launch the EC2 instances and create the IAM policies in each account using the AWS Management Console.
- C
Leverage AWS Resource Access Manager (AWS RAM) to share the necessary resources across accounts and deploy the EC2 instances and IAM policies.
- D
Use AWS Identity and Access Management (IAM) cross-account roles to allow a central account to deploy CloudFormation stacks across the accounts and Regions.
Show answer and explanation
Correct answers: A, D
Explanation
To deploy resources like IAM policies and EC2 instances across multiple accounts and Regions, AWS CloudFormation StackSets is the best solution for automation and scalability. IAM cross-account roles complement this by allowing a central account to perform deployments across other accounts. Manual processes and AWS RAM are not suitable for this specific use case.
- A. Correct.
This is correct. AWS CloudFormation StackSets enable automated deployment of AWS resources, such as IAM policies and EC2 instances, across multiple AWS accounts and Regions in a scalable manner.
- B. Incorrect.
This is incorrect. Manually creating resources is neither automated nor scalable and could lead to misconfigurations or governance issues.
- C. Incorrect.
This is incorrect. AWS RAM is used to share resources such as VPC subnets or Transit Gateways across accounts but does not directly help in deploying EC2 instances or IAM policies.
- D. Correct.
This is correct. IAM cross-account roles allow a central account to assume roles in other accounts, enabling centralized deployment of resources using services like CloudFormation StackSets.