A company is using AWS Organizations to centrally manage its AWS accounts. The company has turned on AWS Config in each member account by using AWS CloudFormation StackSets. The company has configured trusted access in Organizations for AWS Config and has configured a member account as a delegated administrator account for AWS Config. A DevOps engineer needs to implement a new security policy. The policy must require all current and future AWS member accounts to use a common baseline of AWS Config rules that contain remediation actions that are managed from a central account. Non-administrator users who can access member accounts must not be able to modify this common baseline of AWS Config rules that are deployed into each member account. Which solution will meet these requirements?

Question

Accepted Answer

D. Create an AWS Config conformance pack that contains the AWS Config rules and remediation

Answer

A. Create a CloudFormation template that contains the AWS Config rules and remediation actions.

Answer

B. Create an AWS Config conformance pack that contains the AWS Config rules and remediation

Answer

C. Create a CloudFormation template that contains the AWS Config rules and remediation actions.

A company is using AWS Organizations to centrally manage its AWS accounts. The company has turned on AWS Config in each member account by using AWS CloudFormation StackSets. The company has…

Question

Options

How the community answered

Explanation

Topics

Community Discussion