
Ultimate access to all questions.
A company utilizes AWS Organizations to manage multiple AWS accounts centrally. They have activated AWS Config across all member accounts via AWS CloudFormation StackSets and established trusted access for AWS Config within the Organizations framework. Furthermore, they have appointed a specific member account as the delegated administrator for AWS Config. The company requires a new security policy to be implemented by a DevOps engineer. This policy mandates that all existing and future member accounts must comply with a uniform set of AWS Config rules that include remediation actions, which are to be controlled from a single, central account. It is also a requirement that non-administrator users, who may have access to these member accounts, are prevented from altering the established baseline of AWS Config rules. Which solution will effectively fulfill these requirements?
A
Create a CloudFormation template that contains the AWS Config rules and remediation actions. Deploy the template from the Organizations management account by using CloudFormation StackSets.
B
Create an AWS Config conformance pack that contains the AWS Config rules and remediation actions. Deploy the pack from the Organizations management account by using CloudFormation StackSets.
C
Create a CloudFormation template that contains the AWS Config rules and remediation actions. Deploy the template from the delegated administrator account by using AWS Config.
D
Create an AWS Config conformance pack that contains the AWS Config rules and remediation actions. Deploy the pack from the delegated administrator account by using AWS Config.