Exam AWS Certified SysOps Administrator - Associate topic 1 question 151 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 151
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A company is expanding its use of AWS services across its portfolios. The company wants to provision AWS accounts for each team to ensure a separation of business processes for security, compliance, and billing. Account creation and bootstrapping should be completed in a scalable and efficient way so new accounts are created with a defined baseline and governance guardrails in place. A SysOps administrator needs to design a provisioning process that saves time and resources.

Which action should be taken to meet these requirements?

A. Automate using AWS Elastic Beanstalk to provision the AWS accounts, set up infrastructure, and integrate with AWS Organizations.
B. Create bootstrapping scripts in AWS OpsWorks and combine them with AWS CloudFormation templates to provision accounts and infrastructure.
C. Use AWS Config to provision accounts and deploy instances using AWS Service Catalog.
D. Use AWS Control Tower to create a template in Account Factory and use the template to provision new accounts.

Show Suggested Answer

Suggested Answer: D 🗳️

by Liongeek at Nov. 16, 2022, 8 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Christina666

11 months, 1 week ago

Selected Answer: D

If you are hosting more than a handful of accounts, it’s beneficial to have an orchestration layer that facilitates account deployment and account governance. You can adopt AWS Control Tower as your primary way to provision accounts and infrastructure. With AWS Control Tower, you can more easily adhere to corporate standards, meet regulatory requirements, and follow best practices. AWS Control Tower enables end users on your distributed teams to provision new AWS accounts quickly, by means of configurable account templates in Account Factory. Meanwhile, your central cloud administrators can monitor that all accounts are aligned with established, company-wide compliance policies.

upvoted 4 times

...

noahsark

1 year, 3 months ago

Selected Answer: D

Use AWS Control Tower to create a template in Account Factory and use the template to provision new accounts. https://d1.awsstatic.com/products/control-tower/Product-Page-Diagram_AWS-Control-Tower.9281926228bb2900c76b4b6d85b2819efc078978.png

upvoted 2 times

jipark

10 months, 2 weeks ago

great !!

upvoted 1 times

...

braveheart22

1 year, 4 months ago

The answer is DDD. Account Factory – An Account Factory is a configurable account template that helps to standardize the provisioning of new accounts with pre-approved account configurations. AWS Control Tower offers a built-in Account Factory that helps automate the account provisioning workflow in your organization. https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html

upvoted 1 times

...