AWS Certified Solutions Architect Associate SAA-C03 Practice Question
A company wants to automate the setup of a secure and compliant multi-account environment using pre-built templates and implement governance using guardrails. Which service should they leverage to achieve this goal?
AWS Control Tower provides an easy way to set up and govern a new, secure multi-account AWS environment based on best practices. It automates the creation of a landing zone, enforces governance using guardrails, and integrates with AWS Organizations for account management.
AWS Organizations allows for centralized management of multiple AWS accounts but does not automate the setup of a secure environment with best practices and guardrails.
AWS Config helps assess, audit, and evaluate the configuration of AWS resources but does not assist in setting up multiple accounts or enforcing governance across them.
AWS CloudFormation is an Infrastructure-as-code (IaC) tool that automates the provisioning of AWS resources using templates but doesn't provide the governance and compliance enforcement needed for multi-account setups.
Therefore, AWS Control Tower is the appropriate service for this scenario.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are AWS Control Tower's guardrails?
Open an interactive chat with Bash
How does AWS Control Tower automate the creation of a landing zone?
Open an interactive chat with Bash
What is the role of AWS Organizations in AWS Control Tower?