Security World 2 · Guardrails Above · Stage 4

Same Everywhere

Deploy once, everywhere: the same baseline in every account and Region, checked before it ships, and shared instead of copied.

  • CloudFormation StackSets
  • CloudFormation Guard
  • Tags
  • AWS Firewall Manager
  • Service Catalog
  • AWS RAM
Domain
Security
World
Security World 2: Guardrails Above (Professional)
Game type
Organization tree: Set controls on an organization's tree and read each account's verdict.
Time
About 30 minutes on a first attempt (estimated)
Exam guides
  • SOA-C03Skill 4.1.3: Implement multi-account strategies securely (for example, AWS Organizations, service control policies, IAM Identity Center)
  • SAP-C02Task 1.4: Design a multi-account AWS environment
  • DOP-C02Task 2.2: Deploy automation to create, onboard, and secure AWS accounts in a multi-account or multi-Region environment
  • SCS-C03Skill 6.2.1: Use infrastructure as code (IaC) to deploy cloud resources consistently and securely across accounts (for example, CloudFormation stack sets, third-party IaC tools, CloudFormation Guard, cfn-lint); Skill 6.2.2: Use tags to organize AWS resources into groups for management (for example, by grouping by department, cost center, environment); Skill 6.2.3: Deploy and enforce policies and configurations from a central source (for example, AWS Firewall Manager)