SAP-C02 Q622 · Multi-Account

Question

A solutions architect is designing a solution to automatically provision new AWS accounts in an organization in AWS Organizations. The solutions architect has enabled AWS Control Tower for the organization. The solution must enable security controls and create resources such as billing alarms after creating new AWS accounts. The solution must be scalable. Which solution meets these requirements with the LEAST operational overhead?

Accepted Answer

Option C meets all requirements with the least operational overhead:

1. **Account Creation via Account Factory**: Uses AWS Service Catalog as the interface for Account Factory, which is the standard, supported mechanism for creating new accounts in AWS Control Tower. Account Factory through Service Catalog provides a self-service provisioning experience.

2. **Lifecycle Events for Automation**: AWS Control Tower emits lifecycle events (via Amazon EventBridge) when specific actions occur—such as `CreateManagedAccount`. By configuring a lifecycle event to trigger a Lambda function, you create an event-driven, fully automated pipeline.

3. **Lambda + CloudFormation for Resource Deployment**: The Lambda function deploys a CloudFormation template into the newly created account. This is the sta

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

🔒 Security

🎯 Exam Tips