A company with multiple accounts and teams wants to set up a new multi-account AWS environment. Which AWS service supports this requirement?

Question

Options

• AAWS CloudFormation
• BAWS Control Tower
• CAWS Config
• DAmazon Virtual Private Cloud (Amazon VPC)

• B
  86% (12)
• C
  7% (1)
• D
  7% (1)

Explanation

AWS Control Tower is purpose-built to set up and govern a secure, compliant, multi-account AWS environment (called a Landing Zone) with best practices built in. It automates account creation, applies guardrails (policies), and provides centralized visibility across all accounts and teams - making it the ideal service for this exact use case.

Why the others are wrong:

• A. AWS CloudFormation is an infrastructure-as-code service for provisioning resources using templates, not for managing multi-account governance.
• C. AWS Config monitors and records resource configurations and compliance, but does not set up or manage multi-account environments.
• D. Amazon VPC is a networking service for creating isolated virtual networks, completely unrelated to multi-account management.

Memory Tip: Think of Control Tower = Control over multiple accounts - just like a real air traffic control tower manages many planes, AWS Control Tower manages many AWS accounts from one central place. If a question mentions multi-account setup or governance, Control Tower is almost always the answer.

No community discussion yet for this question.