A company uses an organization in AWS Organizations to manage 10 AWS accounts. All features are enabled, and trusted access for AWS CloudFormation is enabled. A DevOps engineer needs to use CloudForma

Question

Options

• ACreate a CloudFormation StackSet that has service-managed permissions. Set the root OU as a
• BCreate a CloudFormation StackSet that has service-managed permissions. Set the root OU as a
• CCreate a CloudFormation StackSet that has self-managed permissions. Set the root OU as a
• DCreate a CloudFormation StackSet that has self-managed permissions. Set the root OU as a

• A
  78% (38)
• B
  6% (3)
• C
  12% (6)
• D
  4% (2)

Explanation

Using a CloudFormation StackSet with service-managed permissions and targeting the root OU allows deployment of the IAM role across all accounts in the organization with minimal operational overhead. Service-managed permissions simplify the deployment process by automating the necessary permissions for CloudFormation to operate across all accounts in the organization, without requiring additional setup or manual intervention. This solution ensures that the IAM role is consistently deployed to both the management account and all member accounts in the organization with the least amount of effort.

No community discussion yet for this question.