SOA-C02 Question 140
Single answerA company needs to deploy a centralized logging solution across multiple AWS accounts and Regions. The solution must ensure that the necessary resources, such as CloudWatch Log Groups and IAM roles, are created in each Region and account automatically. What is the most efficient approach to achieve this?
- A
Use AWS Resource Access Manager (AWS RAM) to share CloudWatch Log Groups across accounts and Regions.
- B
Use AWS CloudFormation StackSets to deploy the required resources across multiple accounts and Regions.
- C
Manually create the required resources in each account and Region using the AWS Management Console.
- D
Use AWS IAM cross-account roles to automatically replicate resources across accounts and Regions.
Show answer and explanation
Correct answer: B
Explanation
AWS CloudFormation StackSets is the best solution for deploying resources across multiple AWS accounts and Regions efficiently. It allows administrators to define infrastructure as code in a CloudFormation template and centrally deploy it to multiple accounts and Regions. This ensures consistency, scalability, and reduces manual effort, making it the ideal choice for this scenario.
- A. Incorrect.
AWS Resource Access Manager (AWS RAM) is used to share existing resources, such as VPC subnets or Transit Gateways, across accounts. However, it does not create or deploy new resources, so it is not suitable for this scenario.
- B. Correct.
AWS CloudFormation StackSets is specifically designed for deploying and managing resources across multiple AWS accounts and Regions. It allows administrators to define a CloudFormation template once and roll it out centrally, making this the most efficient solution.
- C. Incorrect.
Manually creating resources in each account and Region is error-prone and time-consuming. This approach is not scalable or efficient for centralized deployments.
- D. Incorrect.
AWS IAM cross-account roles enable access permissions across accounts, but they do not replicate or deploy resources automatically. They are not suitable for this requirement.