You need to deploy AWS Control Tower in an environment where some accounts have existing IAM roles and policies that might conflict with Control Tower's guardrails. Describe how you would identify and resolve these conflicts to ensure a smooth deployment of AWS Control Tower.

Simulated

Deploy AWS Control Tower without reviewing existing IAM roles and policies.

0.0%

Manually review each account's IAM roles and policies for conflicts with Control Tower's guardrails, and adjust or remove conflicting configurations before deploying Control Tower.

50.0%

Disable all existing IAM roles and policies before deploying AWS Control Tower.

16.7%

Deploy AWS Control Tower and then manually resolve any conflicts that arise.

33.3%

AWS Certified Security - Specialty

Get started today

Comments

You need to deploy AWS Control Tower in an environment where some accounts have existing IAM roles and policies that might conflict with Control Tower's guardrails. Describe how you would identify and resolve these conflicts to ensure a smooth deployment of AWS Control Tower.