312-40 practice question 16 of 25

Steven Smith has been working as a cloud security engineer in an MNC for the past 4 years. His organization uses AWS cloud-based services. Steven…

Full set: 147 questions
Steven Smith has been working as a cloud security engineer in an MNC for the past 4 years. His organization uses AWS cloud-based services. Steven handles a complex application on AWS that has several resources and it is difficult for him to manage these resources. Which of the following AWS services allows Steven to make a set of related AWS resources easily and use or provision them in an orderly manner so that he can spend less time managing resources and more time on the applications that run in the AWS environment?
Answer options
A: AWS CloudFormation Correct answer
B: AWS Control Tower
C: AWS Config
D: Amazon CloudFront
Correct Answer:
A. AWS CloudFormation
Explanation

AWS CloudFormation provides a common language to model and provision all the infrastructure resources in a cloud environment. It allows you to use a simple text file (in YAML or JSON) to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts. This "Infrastructure as Code" (IaC) service directly solves Steven's problem of managing a complex set of related resources in an orderly and repeatable way, allowing him to focus on the application itself.

Why Incorrect

B. AWS Control Tower is used to set up and govern a secure, multi-account AWS environment, focusing on governance and compliance, not application resource provisioning.
C. AWS Config is a service for assessing, auditing, and evaluating the configurations of AWS resources for compliance, not for provisioning them.
D. Amazon CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs, not an infrastructure management tool.

References

1. Amazon Web Services. (n.d.). What Is AWS CloudFormation?. AWS Documentation. Retrieved from https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html. (The official documentation states, "AWS CloudFormation lets you model, provision, and manage AWS and third-party resources by treating infrastructure as code.").

2. Amazon Web Services. (n.d.). AWS CloudFormation Features. Retrieved from https://aws.amazon.com/cloudformation/features/. (This page highlights features like "Model your entire infrastructure in a text file").

Scroll to Top