Baseline IAM roles must be pushed to every account under the city’s OUs from the management plane. Which IaC pattern best fits org-scale deployment?
Select an answer to reveal the explanation.
Short Explanation
One management-plane lever, many accounts. StackSets push the same baseline roles into every OU member so nobody is waiting on a ZIP file and a rainy-day click-through.
Full Explanation
CloudFormation StackSets are designed to deploy common stacks across Organization accounts and OUs from a central administration point—ideal for baseline roles. Manual email-and-click distribution, roles only in the management account, and undocumented console processes do not scale or audit well.