Examice

Exam DOP-C02 All QuestionsBrowse all questions from this exam

Question 227

A company needs to adopt a multi-account strategy to deploy its applications and the associated CI/CD infrastructure. The company has created an organization in AWS Organizations that has all features enabled. The company has configured AWS Control Tower and has set up a landing zone.

The company needs to use AWS Control Tower controls (guardrails) in all AWS accounts in the organization. The company must create the accounts for a multi-environment application and must ensure that all accounts are configured to an initial baseline.

Which solution will meet these requirements with the LEAST operational overhead?

Create an AWS Control Tower Account Factory Customization (AFC) blueprint that uses the baseline configuration. Use AWS Control Tower Account Factory to provision a dedicated AWS account for each environment and a CI/CD account by using the blueprint.

Use AWS Control Tower Account Factory to provision a dedicated AWS account for each environment and a CI/CD account. Use AWS CloudFormation StackSets to apply the baseline configuration to the new accounts.

Use Organizations to provision a multi-environment AWS account and a CI/CD account. In the Organizations management account, create an AWS Lambda function that assumes the Organizations access role to apply the baseline configuration to the new accounts.

Use Organizations to provision a dedicated AWS account for each environment, an audit account, and a CI/CD account. Use AWS CloudFormation StackSets to apply the baseline configuration to the new accounts.

Correct Answer: A

The option that creates the AWS Control Tower Account Factory Customization (AFC) blueprint and uses the AWS Control Tower Account Factory to provision accounts is the best choice. This approach integrates closely with AWS Control Tower and allows for automated provisioning and baseline configuration with minimal operational overhead. The use of AFC ensures that accounts are created with the necessary configurations and guardrails upfront, streamlining the process and reducing the need for additional setup and management later.

Discussion

KaranNishadOption: A

AWS Control Tower Account Factory Customization (AFC)

tgv

---> A

trungtdOption: A

All of these options are possible. But A is the LEAST operational overhead