Which combination of steps will meet these requirements?

By:
In: DOP-C02
Tagged:
With: 1 Comment
A company has an AWS Control Tower landing zone that manages its organization in AWS Organizations.The company created an OU structure that is based on the company’s requirements.The company’s DevOps team has established the core accounts for the solution and an account for all centralized AWS CloudFormation and AWS Service Catalog solutions.The company wants to offer a series of customizations that an account can request through AWS Control Tower.

Which combination of steps will meet these requirements?

(Choose three.)

Enable trusted access for CloudFormation with Organizations by using service-managed permissions.

Create an IAM role that is named AWSControlTowerBlueprintAccess. Configure the role with a trust policy that allows the AWSControlTowerAdmin role in the management account to assume the role. Attach the AWSServiceCatalogAdminFullAccess IAM policy to the AWSControlTowerBlueprintAccess role.

Create a Service Catalog product for each CloudFormation template.

Create a CloudFormation stack set for each CloudFormation template. Enable automatic deployment for each stack set. Create a CloudFormation stack instance that targets specific OUs.

Deploy the Customizations for AWS Control Tower (CfCT) CloudFormation stack.

Create a CloudFormation template that contains the resources for each customization.

2025-10-13

1 Comment

  1. Lisa
    Author

    I design that the answer is:
    Create an IAM role that is named AWSControlTowerBlueprintAccess. Configure the role with a trust policy that allows the AWSControlTowerAdmin role in the management account to assume the role. Attach the AWSServiceCatalogAdminFullAccess IAM policy to the AWSControlTowerBlueprintAccess role.

Leave a Reply

Your email address will not be published. Required fields are marked *

17 − 5 =