CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Navigating Multi-Account Strategies in AWS
Explore a key AWS decision that trips candidates. Learn the correct choice and why it matters for multi-account strategies.
Moving applications to AWS is a significant step for enterprises. A multi-account strategy can enhance security and management. However, candidates often stumble on questions about which services best support this approach.
The question
A large enterprise is moving its applications to AWS and wants to implement a multi-account strategy for better security and management. Which AWS service should they use to manage permissions and policies across multiple accounts?
- A. AWS Organizations.
- B. AWS Config.
- C. AWS CloudFormation.
- D. AWS Control Tower.
Think before you scroll
Consider what each AWS service offers in terms of managing multiple accounts. Focus on the core functionalities that relate to permissions and policy management across these accounts.
The answer
The correct option is A. AWS Organizations. This service provides centralized management of permissions and policies across multiple accounts, making it ideal for enterprises implementing a multi-account strategy.
Why the other options lose
- B. AWS Config. This service tracks configurations and compliance but does not manage permissions across accounts. It focuses on resource configuration monitoring and auditing.
- C. AWS CloudFormation. While this service helps in deploying resources consistently, it does not manage permissions or policies. Its main purpose is infrastructure as code, not multi-account governance.
- D. AWS Control Tower. Although Control Tower provides governance and best practices for AWS accounts, it does not directly manage permissions and policies across multiple accounts like Organizations does.
The concept behind it
The underlying principle is centralized management in a multi-account environment. AWS Organizations enables you to create and manage policies across accounts, enhancing security and simplifying management. Understanding this concept prepares you for variations of the question regarding account governance.
Exam trap to remember
Remember: AWS Organizations is essential for managing permissions in a multi-account setup. Focus on management capabilities when considering options.