A city mandates that all new networking and IAM baselines be deployed from a CI pipeline using infrastructure as code, not console click-ops. Which approach best meets that change-control requirement?
Select an answer to reveal the explanation.
Short Explanation
Click-ops is how two accounts quietly diverge. Put the network and IAM blueprint in CloudFormation and let the pipeline stamp it the same way every time—auditable, repeatable, and reviewable.
Full Explanation
Infrastructure as code such as CloudFormation, driven by CI, satisfies change-control requirements for consistent networking and IAM baselines across accounts. Console-only creation, manual recreation from informal artifacts, and unrestricted AdministratorAccess undermine repeatability, review, and least privilege.