A global software company maintains a large number of AWS accounts for development, testing, and production environments across various regions. Each account requires a standardized set of foundational resources, including specific IAM roles, network configurations (VPCs, subnets, route tables), and security groups. The company needs to provision and manage these identical stacks consistently across all accounts and regions, ensuring that any updates to the foundational infrastructure are propagated automatically. Which AWS CloudFormation feature is designed for this specific use case?
- ACloudFormation StackSets
- BCloudFormation Custom Resources
- CCloudFormation Nested Stacks
- DCloudFormation Change Sets
Show answer & explanationAnswer & explanation
Correct answer: A. CloudFormation StackSets
CloudFormation StackSets are designed to deploy and manage CloudFormation stacks across multiple AWS accounts and regions from a single CloudFormation template. This directly addresses the requirement for provisioning identical foundational resources consistently across a large number of accounts and regions and automatically propagating updates.
Why the other options are wrong
- B. Custom Resources allow extending CloudFormation capabilities with custom logic, not for multi-account/region deployments.
- C. Nested Stacks allow modularity within a single stack deployment, not across multiple accounts/regions.
- D. Change Sets preview changes to a single stack, they don't manage deployments across multiple accounts/regions.
CloudFormation StackSets
AWS CloudFormation StackSets extend the functionality of stacks by enabling you to deploy and manage CloudFormation stacks across multiple AWS accounts and regions from a single CloudFormation template. This allows for consistent provisioning and updates of infrastructure across an organization.
- Deploys identical stacks across multiple accounts and regions.
- Managed from a central administrative account.
- Ensures consistent infrastructure across the organization.
- Supports rolling updates and error handling.
Memory trick: StackSets are like a global copy-paste for your CloudFormation.