Home › AWS SysOps Associate › cloudcomputing › sysopsdeployment › Which combination correctly provisions a central…
Which combination correctly provisions a centrally-managed multi-account landing zone for an enterprise — including SCPs, baseline guardrails, and SSO?
AManually creating each account one by one with no policy
BMigrating every account into Amazon Aurora
CAWS Control Tower (with AWS Organizations + IAM Identity Center)
DStoring accounts in S3 Glacier Deep Archive
Answer & Solution
Correct answer: C. AWS Control Tower (with AWS Organizations + IAM Identity Center)
Control Tower is AWS's canonical landing-zone offering — Organizations underneath + guardrails (preventive SCPs, detective Config rules) + IAM Identity Center for SSO. The others aren't.
Related questions
Which rollout strategy minimises blast radius when shipping a risky change to a fleet of EWhich feature of AWS Resource Access Manager (RAM) lets one account share resources like sA CloudFormation stack fails midway with an `IAM role doesn't have permission` error and lWhich AWS service lets a team package and version their own internal application configuraA new EC2 launch in a private subnet repeatedly fails to download a yum package. The instaWhich CloudFormation feature lets you reference a value created in one stack from another Which AWS Systems Manager capability lets administrators run a documented automation sequeAn organisation needs to deploy a new version of a web app to 100 EC2 instances behind an