DOP-C02 · Question #12
A company has chosen AWS to host a new application. The company needs to implement a multi-account strategy. A DevOps engineer creates a new AWS account and an organization in AWS Organizations. The D
The correct answer is D. Deploy the Customizations for AWS Control Tower (CfCT) solution. Use an AWS CodeCommit. The CfCT solution is designed for the exact purpose stated in the question. It extends the capabilities of AWS Control Tower by providing you with a way to automate resource provisioning and apply custom configurations across all AWS accounts created in the Control Tower environm
Question
A company has chosen AWS to host a new application. The company needs to implement a multi-account strategy. A DevOps engineer creates a new AWS account and an organization in AWS Organizations. The DevOps engineer also creates the OU structure for the organization and sets up a landing zone by using AWS Control Tower. The DevOps engineer must implement a solution that automatically deploys resources for new accounts that users create through AWS Control Tower Account Factory. When a user creates a new account, the solution must apply AWS CloudFormation templates and SCPs that are customized for the OU or the account to automatically deploy all the resources that are attached to the account. All the OUs are enrolled in AWS Control Tower. Which solution will meet these requirements in the MOST automated way?
Options
- AUse AWS Service Catalog with AWS Control Tower. Create portfolios and products in AWS
- BDeploy CloudFormation stack sets by using the required templates. Enable automatic
- CCreate an Amazon EventBridge rule to detect the CreateManagedAccount event. Configure AWS
- DDeploy the Customizations for AWS Control Tower (CfCT) solution. Use an AWS CodeCommit
How the community answered
(37 responses)- A8% (3)
- B19% (7)
- C5% (2)
- D68% (25)
Explanation
The CfCT solution is designed for the exact purpose stated in the question. It extends the capabilities of AWS Control Tower by providing you with a way to automate resource provisioning and apply custom configurations across all AWS accounts created in the Control Tower environment. This enables the company to implement additional account customizations when new accounts are provisioned via the Control Tower Account Factory. The CloudFormation templates and SCPs can be added to a CodeCommit repository and will be automatically deployed to new accounts when they are created. This provides a highly automated solution that does not require manual intervention to deploy resources and SCPs to new
Topics
Community Discussion
No community discussion yet for this question.