AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 206

Question

A company uses AWS Control Tower and AWS CloudFormation to manage its AWS accounts and to create AWS resources. The company requires all Amazon S3 buckets to be encrypted with AWS Key Management Service (AWS KMS) when the S3 buckets are created in a CloudFormation stack. Which solution will meet this requirement?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Use AWS Control Tower with a multi-account environment. Configure and enable proactive AWS Control Tower controls on all OUs with CloudFormation hooks. AWS Config tracks resource configuration changes and evaluates compliance. AWS CloudFormation provisions infrastructure as code repeatably. AWS Control Tower sets up and governs a secure multi-account landing zone.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 206