A company use an organization in AWS Organizations to manage multiple AWS accounts. The company has enabled all features enabled for the organization. The company configured the organization as a…

Question

Options

• ACreate a new AWS account. Create an AWS Lambda function in the new account to apply the
• BCreate a new AWS account as an AWS Config delegated administrator. Create an AWS Lambda
• CConfigure an Amazon EventBridge rule in the AWS Control Tower management account to
• DConfigure the AWSControlTowerExecution IAM role in each AWS account in the organization to
• ECreate an IAM role in the AWS Control Tower management account that an AWS Lambda
• FConfigure an Amazon EventBridge rule in the AWS Control Tower management account to

• A
  8% (1)
• B
  8% (1)
• C
  69% (9)
• F
  15% (2)

Explanation

C and F: Using Amazon EventBridge rules in the AWS Control Tower management account helps ensure that the Lambda function is triggered whenever there is an OU registration, re-registration, or account update/enrollment event. This setup allows the customizations to apply automatically to both existing and new AWS accounts. E: Creating an IAM role in the AWS Control Tower management account that the Lambda function can assume allows it to manage AWS Config in all accounts across the organization. This role needs permission to assume the AWSControlTowerExecution IAM role, which is already established in each account by AWS Control Tower. This combination of steps ensures that customizations to the AWS Config configuration recorder are applied automatically to both current and future accounts in AWS Control Tower with minimal manual intervention.

No community discussion yet for this question.