AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 336

Question

A company uses an organization in AWS Organizations to manage 10 AWS accounts. All features are enabled, and trusted access for AWS CloudFormation is enabled. A DevOps engineer needs to use CloudFormation to deploy an IAM role to the Organizations management account and all member accounts in the organization. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a CloudFormation StackSet that has service-managed permissions. Set the root OU as a deployment target. Deploy a separate CloudFormation stack in the Organizations management account. AWS Organizations centrally governs and secures multiple AWS accounts. AWS CloudFormation provisions infrastructure as code repeatably.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 336