An organization wants to implement 'Governance as Code' and wants to ensure that any new AWS account created under their organization automatically has a specific set of CloudWatch Alarms and IAM roles. Which feature handles this?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: CloudFormation StackSets with 'Auto-deployment' enabled

StackSets with auto-deployment will automatically push stacks to new accounts added to an OU....

📋Part of AWS Certified DevOps Engineer – Professional (DOP-C02) · AWS Certification Practice
Real Exam ScenarioScenario Based

An organization wants to implement 'Governance as Code' and wants to ensure that any new AWS account created under their organization automatically has a specific set of CloudWatch Alarms and IAM roles. Which feature handles this?

✓ Correct Answer & ExplanationScenario Based

Correct Answer

CloudFormation StackSets with 'Auto-deployment' enabled

Why This Answer Is Correct

StackSets with auto-deployment will automatically push stacks to new accounts added to an OU.

📚 What This Question Tests

This question evaluates your knowledge of Scenario Based — a core concept tested in AWS Certified DevOps Engineer – Professional (DOP-C02). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.