Question 510
For the enterprise requirement "A platform team deploys the same baseline IAM roles and configuration stacks into 70 governed member accounts", the team implemented this change: Use CloudFormation StackSets with the appropriate organization deployment permissions and guarded account or OU targeting. Which outcome is the most meaningful acceptance test?
Explanation
Correct Answer
This measures the behavior required by the specific solution, rather than simply checking that it was configured. CloudFormation StackSets manages stack instances across accounts and Regions from a controlled template. The acceptance condition is linked directly to the scenario: A platform team deploys the same baseline IAM roles and configuration stacks into 70 governed member accounts.
Incorrect Answers
Failure of one Region does not interrupt healthy remaining regional capacity under synthetic load. However, this does not establish the required outcome: a newly added target account receives the intended stack instances while an excluded OU does not.
The released image digest is present in each target Region before workloads attempt recovery. However, this does not establish the required outcome: a newly added target account receives the intended stack instances while an excluded OU does not.
The first Region deploys, the second Region waits for approval, and rejection prevents restricted rollout. However, this does not establish the required outcome: a newly added target account receives the intended stack instances while an excluded OU does not.