AWS Certified DevOps Engineer – ProfessionalConfiguration Management and Infrastructure as CodeMedium
A large enterprise is adopting Infrastructure as Code (IaC) with AWS CloudFormation across hundreds of accounts and multiple regions. They need a scalable and centralized way to deploy and manage common infrastructure components (e.g., VPCs, IAM roles, security groups) consistently across all accounts and regions. Updates to these components must be propagated efficiently. Which AWS service is designed to address this complex multi-account, multi-region IaC deployment challenge?
- AAWS CodeDeploy
- BAWS Service Catalog
- CAWS CloudFormation StackSets
- DAWS Organizations
Show answer & explanationAnswer & explanation
Correct answer: C. AWS CloudFormation StackSets
AWS CloudFormation StackSets allows you to provision, update, or delete CloudFormation stacks across multiple AWS accounts and regions with a single operation. This is ideal for managing common infrastructure components consistently at scale in an enterprise environment.
Why the other options are wrong
- A. AWS CodeDeploy automates code deployments to various compute services, not infrastructure provisioning across accounts/regions.
- B. AWS Service Catalog helps organizations create and manage catalogs of IT services, but it doesn't directly manage multi-account, multi-region IaC deployments in the same way as StackSets.
- D. AWS Organizations helps manage multiple AWS accounts but doesn't provide the IaC deployment capabilities across accounts/regions itself; it often works in conjunction with StackSets.
AWS CloudFormation StackSets
An extension of CloudFormation that enables you to provision, update, or delete CloudFormation stacks across multiple AWS accounts and regions from a single operation.
- Centralized management of common infrastructure.
- Supports deployment to multiple accounts and regions.
- Ideal for enterprise-scale IaC consistency.
Memory trick: StackSets spreads your stacks, across accounts and regions, bringing order back.