AWS Certified SysOps Administrator – Associate (legacy) — Question 123

A company has 50 AWS accounts and wants to create an identical Amazon VPC in each account. Any changes the company makes to the VPCs in the future must be implemented on every VPC.
What is the SIMPLEST method to deploy and update the VPCs in each account?

Answer options

• A. Create an AWS CloudFormation template defines the VPC. Log in to the AWS Management Console under each account and create a stack from the template.
• B. Create a shell script that configures the VPC using the AWS CLI. Provide a list of accounts to the script from a text file, then create the VPC in every account in the list.
• C. Create an AWS Lambda function that configures the VPC. Store the account information in Amazon DynamoDB, grant Lambda access to the DynamoDB table, then create the VPC in every account in the list.
• D. Create an AWS CloudFormation template that defines the VPC. Create an AWS CloudFormation StackSet based on the template, then deploy the template to all accounts using the stack set.

Correct answer: D

Explanation

The correct answer is D because using an AWS CloudFormation StackSet allows you to deploy and manage the VPC across multiple accounts in a consistent manner, simplifying updates and management. Options A, B, and C involve more manual steps or complexity, which makes them less efficient for managing identical VPCs across many accounts.