AWS Certified Solutions Architect – Professional (SAP-C02) — Question 428

A company is running its solution on AWS in a manually created VPC. The company is using AWS CloudFormation to provision other parts of the infrastructure. According to a new requirement, the company must manage all infrastructure in an automatic way.

What should the company do to meet this new requirement with the LEAST effort?

Answer options

• A. Create a new AWS Cloud Development Kit (AWS CDK) stack that strictly provisions the existing VPC resources and configuration. Use AWS CDK to import the VPC into the stack and to manage the VPC.
• B. Create a CloudFormation stack set that creates the VPC. Use the stack set to import the VPC into the stack.
• C. Create a new CloudFormation template that strictly provisions the existing VPC resources and configuration. From the CloudFormation console, create a new stack by importing the Existing resources.
• D. Create a new CloudFormation template that creates the VPC. Use the AWS Serverless Application Model (AWS SAM) CLI to import the VPC.

Correct answer: C

Explanation

To bring manually created resources under CloudFormation management with minimal effort, the native resource import feature should be used. This involves writing a template that matches the exact state of the existing VPC and initiating an import operation via the CloudFormation console. Other options like AWS CDK, AWS SAM, or StackSets introduce unnecessary complexity and are not the most direct methods for importing existing resources.