Distribute a monitoring IAM role to accounts in AWS Organizations.
Apply the same CloudFormation definition when another Region is added.
Which feature is most appropriate?
Use CloudFormation StackSets to deploy and manage stacks across multiple accounts and Regions.
Detailed explanation
DNS records do not distribute arbitrary AWS resources.
DNS records do not distribute arbitrary AWS resources.
Manual rollout makes omissions and configuration differences more likely.
Manual rollout makes omissions and configuration differences more likely.
Replicating a template file does not deploy a stack.
Replicating a template file does not deploy a stack.
StackSets centrally deploy and manage a stack across selected accounts and Regions.
StackSets centrally deploy and manage a stack across selected accounts and Regions.
Check official documentation
Compare the following points with the official documentation.
AWS CloudFormation StackSetsの公式説明を確認する。
What to confirm
単一アカウントのスタックとStackSetsを区別できる。
Key points
- StackSets
- Multiple accounts
- Multiple Regions
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Centralized rollout
StackSets reduce drift when a baseline must be installed in many accounts.
Target selection
Account and Region targets define where the stack instances are created.