AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
An organization with AWS Organizations wants every existing and future member account in two Regions to run a standard set of IAM roles and AWS Lambda functions. The CloudOps engineer must implement this once and have the stacks automatically appear in any new accounts that join the same organizational unit (OU). Which approach meets these requirements with the least ongoing operational effort?
Instruct each member account to run an AWS Systems Manager Automation runbook that invokes cloudformation deploy for the required templates in both Regions.
Create a self-managed CloudFormation StackSet in a delegated administrator account and manually add every member account ID to the target list when the account is created.
Create a service-managed CloudFormation StackSet in the management account, specify the two target Regions and the OU, and enable auto-deployment so that new accounts receive the stack automatically.
Build an AWS CDK pipeline that deploys the stack to each account and Region, triggered by an EventBridge rule that detects new AWS Organizations accounts.
Using a service-managed CloudFormation StackSet that targets the desired OU meets all stated requirements. When trusted access is enabled, CloudFormation automatically assumes the required execution roles in each member account. By enabling the StackSet's auto-deployment feature, CloudFormation automatically creates stack instances in any account that is subsequently moved into or created within the target OU and deletes them if the account leaves the OU. Self-managed StackSets, manual scripts, or CDK pipelines would require manual additions or separate automation each time an account is created, resulting in higher operational overhead.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a CloudFormation StackSet?
Open an interactive chat with Bash
What is the difference between service-managed and self-managed StackSets?
Open an interactive chat with Bash
How does auto-deployment in service-managed StackSets work?
Open an interactive chat with Bash
What is a service-managed CloudFormation StackSet?
Open an interactive chat with Bash
How does auto-deployment in a CloudFormation StackSet work?
Open an interactive chat with Bash
Why is a service-managed StackSet preferred over a self-managed one?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Deployment, Provisioning, and Automation
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .