AWS Certified SysOps Administrator – Associate (legacy) — Question 673

A company is expanding its use of AWS services across its portfolios. The company wants to provision AWS accounts for each team to ensure a separation of business processes for security, compliance, and billing. Account creation and bootstrapping should be completed in a scalable and efficient way so new accounts are created with a defined baseline and governance guardrails in place. A SysOps administrator needs to design a provisioning process that saves time and resources.
Which action should be taken to meet these requirements?

Answer options

• A. Automate using AWS Elastic Beanstalk to provision the AWS accounts, set up infrastructure, and integrate with AWS Organizations.
• B. Create bootstrapping scripts in AWS OpsWorks and combine them with AWS CloudFormation templates to provision accounts and infrastructure.
• C. Use AWS Config to provision accounts and deploy instances using AWS Service Catalog.
• D. Use AWS Control Tower to create a template in Account Factory and use the template to provision new accounts.

Correct answer: A

Explanation

Automating the account creation process using AWS Elastic Beanstalk combined with AWS Organizations allows the administrator to efficiently provision and bootstrap new environments with established baselines. This approach ensures that governance guardrails are consistently applied during the automated deployment phase. Other services like AWS OpsWorks, AWS Config, or AWS Control Tower do not provide this specific integration path as defined in this scenario.