AWS · SAP-C03
Multi-account governance
SAP-C03 · Lesson 14 of 28 · 1:57:07
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SAP-C03 exam (AWS Certified Solutions Architect – Professional). In this lesson: landing zones and controls with Control Tower, automated account provisioning with Account Factory, sharing resources across accounts with AWS RAM, and service and resource control policies. Includes three original practice questions.
Preview the topics
- Platform engineers manage everything in Terraform, and want each new account requested with a file in Git, then created and customized automatically inside the landing zone. What should the architect use?
- Fifty application accounts must place their workloads in the central network team’s VPC, while only the network team manages route tables, gateways, and firewalls. What should the architect configure?
- No one in any member account, including account administrators, may ever turn off CloudTrail or leave the organization. What should the architect use?