You have an Azure subscription and an Amazon Web Services (AWS) account named AWS1. You need to add AWS1 to Microsoft Defender for Cloud. Which two deployment methods can you use to configure…

AWS Systems Manager Automation is used for automating operational tasks within an AWS account and is not a direct deployment method for configuring cross-cloud access for an Azure service like Defender for Cloud.

An AWS CloudFormation stack is a native AWS Infrastructure-as-Code service that allows defining and provisioning AWS resources, including the IAM roles and permissions required for Microsoft Defender for Cloud to access and monitor an AWS account. Defender for Cloud provides pre-configured CloudFormation templates to simplify this setup.

An Azure deployment stack is an Azure-native feature for managing Azure resources and their lifecycle, not for configuring access or deploying resources within a separate AWS account.

An Azure Resource Manager (ARM) template is used for deploying and managing Azure resources, and it cannot directly deploy or configure resources like IAM roles within an AWS account.

A Terraform template provides an open-source Infrastructure-as-Code solution capable of provisioning and managing resources across multiple cloud providers, including AWS. Microsoft Defender for Cloud officially supports using Terraform to deploy the necessary IAM roles and other configurations in an AWS account for secure and automated onboarding.