CLF-C02 · Question #240
A company with multiple accounts and teams wants to set up a new multi-account AWS environment. Which AWS service supports this requirement?
The correct answer is B. AWS Control Tower. AWS Control Tower is purpose-built to set up and govern a secure, compliant, multi-account AWS environment (called a Landing Zone) with best practices built in. It automates account creation, applies guardrails (policies), and provides centralized visibility across all accounts…
Question
A company with multiple accounts and teams wants to set up a new multi-account AWS environment. Which AWS service supports this requirement?
Options
- AAWS CloudFormation
- BAWS Control Tower
- CAWS Config
- DAmazon Virtual Private Cloud (Amazon VPC)
How the community answered
(14 responses)- B86% (12)
- C7% (1)
- D7% (1)
Explanation
AWS Control Tower is purpose-built to set up and govern a secure, compliant, multi-account AWS environment (called a Landing Zone) with best practices built in. It automates account creation, applies guardrails (policies), and provides centralized visibility across all accounts and teams - making it the ideal service for this exact use case.
Why the others are wrong:
- A. AWS CloudFormation is an infrastructure-as-code service for provisioning resources using templates, not for managing multi-account governance.
- C. AWS Config monitors and records resource configurations and compliance, but does not set up or manage multi-account environments.
- D. Amazon VPC is a networking service for creating isolated virtual networks, completely unrelated to multi-account management.
Memory Tip: Think of Control Tower = Control over multiple accounts - just like a real air traffic control tower manages many planes, AWS Control Tower manages many AWS accounts from one central place. If a question mentions multi-account setup or governance, Control Tower is almost always the answer.
Topics
Community Discussion
No community discussion yet for this question.