Explanation:
AWS CloudFormation StackSets allow centralized deployment of CloudFormation templates (which can create IAM roles) across multiple AWS accounts and regions managed by AWS Organizations.
Ultimate access to all questions.
A company uses AWS Organizations to create and manage many AWS accounts. The company wants to deploy new IAM roles in each account. Which action should the SysOps administrator take to deploy the new roles in each of the organization’s accounts?
A
Create a service control policy (SCP) in the organization to add the new IAM roles to each account.
B
Deploy an AWS CloudFormation change set to the organization with a template to create the new IAM roles.
C
Use AWS CloudFormation StackSets to deploy a template to each account to create the new IAM roles.
D
Use AWS Config to create an organization rule to add the new IAM roles to each account.
No comments yet.