AWS Certified SysOps Administrator – AssociateDeployment, Provisioning, and AutomationHard
A large enterprise is adopting a multi-account strategy with AWS Organizations. They need to ensure that all new AWS accounts created within the organization automatically have a baseline set of CloudWatch alarms, IAM roles, and VPC configurations applied. This initial setup must be consistent and automated to reduce operational overhead and ensure compliance from day one. Which AWS service is best suited for provisioning these baseline resources across new accounts?
- AAWS Service Catalog
- BAWS Control Tower
- CAWS CloudFormation StackSets
- DAWS Organizations
Show answer & explanationAnswer & explanation
Correct answer: C. AWS CloudFormation StackSets
AWS CloudFormation StackSets allow you to deploy CloudFormation stacks across multiple AWS accounts and regions from a single CloudFormation template. This is ideal for provisioning a baseline set of resources like CloudWatch alarms, IAM roles, and VPC configurations consistently across new accounts within an organization.
Why the other options are wrong
- A. Service Catalog allows users to provision pre-approved AWS resources, but StackSets is more designed for centralized, automated provisioning across accounts.
- B. AWS Control Tower sets up a landing zone and is great for initial multi-account setup, but for continuous provisioning of *specific* baseline resources *after* initial setup or in existing accounts, StackSets is the granular tool.
- D. AWS Organizations manages accounts but does not provision resources within them; it governs policies and account structure.
AWS CloudFormation StackSets
An extension of CloudFormation that enables you to provision, update, or delete stacks across multiple AWS accounts and regions with a single operation.
- Deploys stacks across multiple accounts/regions.
- Manages consistent resource deployment across an organization.
- Ideal for baseline configurations and shared services.
Memory trick: StackSets stack up resources, across the accounts, consistently.