Q221.A company is migrating its applications to AWS . The applications will be deployed to AWS accounts owned by business units. The company has several teams of Developers who are responsible for the development and maintenance of all applications. The company is expecting rapid growth in the number of users.The company's Chief Technology Officer has the following requirements.Developers must launch the AWS infrastructure using AWS CloudFormation.Developers must not be able to create resources outside of Cloud Formation.The solution must be able to scale to hundreds of AWS accounts.Which of the following would meet these requirements?(Select Two)
A.Using CloudFormation create an lAM role that can be assumed by Cloud Formation that has permissions to Create all the resources the company needs. Use CloudFormation Stack Sets to deploy this template to each AWS account. B.In a central account create an IAM role that can be assumed by developers and attach a policy that allows interaction with CloudFormation. Modify the Assume Policy Document action to allow the lAM role to be passed to Cloudformation. C.Using Cloud Formation create an lAM role that can be assumed by Developers and attach policies that allow interaction with and passing a role to CloudFormation. Attach an inline policy to deny access to all other AWS正确答案AE
Services. Use CloudFormation Stack Sets to deploy this template to each AWS account. D.Using Cloud Formation create an lAM role for each Developer and attach policies that allow interaction with CloudFormation. Use Cloud Formation Stack Sets to deploy this template to each AWS account. E.In a central AS account create an IAM role that can be assumed by Cloud Formation that has permissions to create the resources the company requires. Create a CloudFormation stack policy that allows the lAM role to manage resources Use CloudFormation Stack Sets to deploy the CloudFormation stack policy to each AWS account.
