AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 163

Question

A company has an AWS Control Tower landing zone that manages its organization in AWS Organizations. The company created an OU structure that is based on the company's requirements. The company's DevOps team has established the core accounts for the solution and an account for all centralized AWS CloudFormation and AWS Service Catalog solutions. The company wants to offer a series of customizations that an account can request through AWS Control Tower. Which combination of steps will meet these requirements? (Choose three.)

Accepted Answer

Correct answer: B, C, F. The correct answer is B, C, F. Option B: Create an IAM role that is named AWSControlTowerBlueprintAccess. Configure the role with a trust policy that allows the AWSControlTowerAdmin role in the management account to assume the role. Attach the AWSServiceCata... Option C: Create a Service Catalog product for each CloudFormation template. Option F: Create a CloudFormation template that contains the resources for each customization. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 163