
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company wants to automatically set up and govern a multi-account AWS environment. Which AWS service provides this functionality?
A
AWS IAM Identity Center
B
AWS Systems Manager
C
AWS Config
D
AWS Control Tower
Explanation:
AWS Control Tower is the correct service for automatically setting up and governing multi-account AWS environments. It provides:
Automated account provisioning - Creates and configures new AWS accounts with pre-approved configurations
Centralized governance - Establishes guardrails and policies across multiple accounts
Compliance monitoring - Continuously monitors accounts for compliance with organizational policies
Best practices implementation - Implements AWS best practices for multi-account architectures
Why other options are incorrect:
AWS IAM Identity Center: Provides single sign-on (SSO) access to AWS accounts and applications, but doesn't handle multi-account setup and governance
AWS Systems Manager: Manages resources and automates operational tasks, but doesn't provide multi-account governance
AWS Config: Monitors and records AWS resource configurations for compliance, but doesn't automate multi-account setup
AWS Control Tower specifically addresses the need for automated setup and ongoing governance of multi-account AWS environments, making it the ideal choice for this scenario.