AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
An AWS CloudOps engineer manages a multi-account environment that uses AWS Organizations. The engineer must deploy a standard set of IAM roles by using AWS CloudFormation StackSets with service-managed permissions to two production organizational units (OUs). New accounts that are later added to either OU must automatically receive the stack without further manual steps. Which StackSets configuration will satisfy these requirements?
Set operation preferences to deploy to all accounts concurrently with failure tolerance set to zero.
Configure drift detection on the StackSet and schedule periodic drift remediation.
Enable automatic deployments on the StackSet and specify the target OUs.
Use a StackSet with self-managed permissions and enable trusted access with AWS Organizations.
When a StackSet uses service-managed permissions, enabling the Automatic deployments setting causes AWS CloudFormation to create or delete stack instances whenever accounts enter or leave the specified target OUs. This ensures that any new account added to the OUs receives the required IAM roles without additional action. Drift detection merely reports configuration drift and does not deploy stacks. Operation preferences adjust concurrency and failure tolerance but do not affect deployment to future accounts. Self-managed permissions require manual account targeting and therefore cannot perform automatic deployment to newly created accounts.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are AWS CloudFormation StackSets?
Open an interactive chat with Bash
What are service-managed permissions in StackSets?
Open an interactive chat with Bash
What is drift detection in CloudFormation StackSets?
Open an interactive chat with Bash
What are service-managed permissions in AWS CloudFormation StackSets?
Open an interactive chat with Bash
What does enabling automatic deployments in a CloudFormation StackSet do?
Open an interactive chat with Bash
How does AWS CloudFormation StackSets handle new accounts added to an organizational unit (OU)?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Deployment, Provisioning, and Automation
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .