AWS Certified Cloud Practitioner — Question 622

A company uses AWS Organizations. The company wants to apply security best practices from the AWS Well-Architected Framework to all of its AWS accounts.

Which AWS service will meet these requirements?

Answer options

• A. Amazon Macie
• B. Amazon Detective
• C. AWS Control Tower
• D. AWS Secrets Manager

Correct answer: C

Explanation

AWS Control Tower allows organizations to set up and govern a secure, multi-account AWS environment by automatically applying guardrails that align with AWS Well-Architected security best practices. Other services like Amazon Macie, Amazon Detective, and AWS Secrets Manager focus on specific security tasks such as data privacy, threat investigation, and credential management, rather than holistic multi-account governance.