Which combination of actions should a DevOps engineer perform to meet these requirements?

By:
In: DOP-C02
Tagged:
With: 3 Comments
A company has its AWS accounts in an organization in AWS Organizations. AWS Config is manually configured in each AWS account. The company needs to implement a solution to centrally configure AWS Config for all accounts in the organization The solution also must record resource changes to a central account.

Which combination of actions should a DevOps engineer perform to meet these requirements?

(Choose two.)

Configure a delegated administrator account for AWS Config. Enable trusted access for AWS Config in the organization.

Configure a delegated administrator account for AWS Config. Create a service-linked role for AWS Config in the organization’s management account.

Create an AWS CloudFormation template to create an AWS Config aggregator. Configure a CloudFormation stack set to deploy the template to all accounts in the organization.

Create an AWS Config organization aggregator in the organization’s management account. Configure data collection from all AWS accounts in the organization and from all AWS Regions.

Create an AWS Config organization aggregator in the delegated administrator account. Configure data collection from all AWS accounts in the organization and from all AWS Regions.

2026-03-26

3 Comments

  1. Laura
    Author

    If memory serves me right, the answer is:
    Configure a delegated administrator account for AWS Config. Enable trusted access for AWS Config in the organization.

  2. Joshua
    Author

    I outline that the answer is:
    Configure a delegated administrator account for AWS Config. Enable trusted access for AWS Config in the organization.

  3. Mason
    Author

    To the best of my knowledge, the answer is:
    Configure a delegated administrator account for AWS Config. Enable trusted access for AWS Config in the organization.

Leave a Reply

Your email address will not be published. Required fields are marked *

20 − 8 =