AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 141

Question

A company uses AWS Organizations to manage multiple AWS accounts. The company’s SysOps team has been using a manual process to create and manage IAM roles. The team requires an automated solution to create and manage the necessary IAM roles for multiple AWS accounts. What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Use AWS CloudFormation StackSets with AWS Organizations to deploy and manage IAM roles for the AWS accounts. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Organizations centrally governs and secures multiple AWS accounts.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 141