AWS Certified DevOps Engineer – Professional — Question 165

A company uses AWS Organizations to manage its AWS accounts. A DevOps engineer wants to deploy a new AWS Lambda function to all accounts in the organization by using AWS CloudFormation StackSets. The DevOps engineer uses a delegated administrator account to deploy the stack sets to the member accounts. The stack operation keeps failing, and the stack instance status is OUTDATED.

Which actions should the DevOps engineer take to remediate this error? (Choose two.)

Answer options

• A. Ensure that the AWS Region is the same for the stack sets and the target resources.
• B. Ensure that the delegated administrator account has a trust relationship with the target account.
• C. Ensure that the resources in the stacks do not have termination protection enabled by default.
• D. Ensure that the CloudFormation template is creating unique global resources.
• E. Deploy the stack sets from the management account and not from the delegated administrator account.

Correct answer: B, D

Explanation

The correct actions involve ensuring that the delegated administrator account has a trust relationship with the target account (B), which is crucial for permissions and access. Additionally, creating unique global resources in the CloudFormation template (D) is necessary to avoid conflicts during deployment. The other options do not directly address the root cause of the OUTDATED status.