AWS Certified SysOps Administrator – Associate — Question 155

A company is managing many accounts by using a single organization in AWS Organizations. The organization has all features enabled. The company wants to turn on AWS Config in all the accounts of the organization and in all AWS Regions.

What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?

Answer options

• A. Use AWS CloudFormation Stack Sets to deploy stack instances that turn on AWS Config in all accounts and in all Regions.
• B. Use AWS CloudFormation Stack Sets to deploy stack policies that turn on AWS Config in all accounts and in all Regions.
• C. Use service control policies (SCPs) to configure AWS Config in all accounts and in all Regions.
• D. Create a script that uses the AWS CLI to turn on AWS Config in all accounts in the organization. Run the script from the organization's management account.

Correct answer: A

Explanation

The correct answer is A because AWS CloudFormation Stack Sets allow for the deployment of resources across multiple accounts and regions efficiently. Options B and C do not directly enable AWS Config, and option D, while potentially effective, is less efficient than using Stack Sets for this large-scale deployment.