DOP-C02 · Question #414
A company manages its multi-account environment by using AWS Organizations and AWS Control Tower. The company must deploy standardized security controls and compliance policies across all of its AWS…
The correct answer is A. Create an AWS CDK app that includes an AWS CloudFormation StackSets construct. Configure. Using an AWS CDK app with a CloudFormation StackSets construct allows you to centrally define and deploy standardized security controls to multiple accounts and Regions. Updates to the security controls construct can be propagated automatically to all target accounts and…
Question
A company manages its multi-account environment by using AWS Organizations and AWS Control Tower. The company must deploy standardized security controls and compliance policies across all of its AWS accounts and AWS Regions. Any changes to these controls must be automatically applied to all accounts simultaneously. The company has the required security controls and compliance policies defined in AWS Cloud Development Kit (AWS CDK) as a security controls construct. Which solution will deploy these controls across all accounts and Regions with the LEAST operational overhead?
Options
- ACreate an AWS CDK app that includes an AWS CloudFormation StackSets construct. Configure
- BCreate an AWS CDK app that synthesizes an AWS CloudFormation template from the security
- CConvert the security controls construct to an AWS CloudFormation macro. Create a
- DUse AWS Control Tower to create a customized landing zone that includes configurations from
How the community answered
(20 responses)- A60% (12)
- B10% (2)
- C5% (1)
- D25% (5)
Explanation
Using an AWS CDK app with a CloudFormation StackSets construct allows you to centrally define and deploy standardized security controls to multiple accounts and Regions. Updates to the security controls construct can be propagated automatically to all target accounts and Regions with minimal operational overhead.
Topics
Community Discussion
No community discussion yet for this question.