AWS DevOps Engineer - Professional

By Amazon · Question Mode

QuestionQ17

SDLC Automation

A company uses AWS Control Tower to manage its multi-account AWS environment. Historically, the company has created AWS accounts through AWS Control Tower in the AWS Management Console. The company wants to implement an automated solution to create new AWS accounts by using AWS Control Tower Account Factory.

A DevOps engineer is testing a new approach in which employees upload a CSV file to an Amazon S3 bucket. The .csv file will contain the information necessary to create a new AWS account. An AWS Lambda function will process Amazon S3 event notifications when new files are created in the S3 bucket. The Lambda function will create the AWS account by using the AWS Service Catalog APIs.

The DevOps engineer must implement a solution that publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic when the account-creation process completes successfully.

What should the DevOps engineer do to automate the SNS notification?

Explanation

AWS Control Tower records the successful creation and provisioning of an Account Factory account as a CreateManagedAccount lifecycle event. An Amazon EventBridge rule can react to that event, filter for successful completion, and use the Amazon SNS topic as its target. The Service Catalog ProvisionProduct API event occurs when the provisioning request is submitted, so it does not by itself establish that account creation completed successfully.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!