A county previously created AWS accounts ad hoc and now wants standardized landing zones with guardrails. Which service should the architect recommend to baseline that multi-account governance?
Select an answer to reveal the explanation.
Short Explanation
Control Tower is the county’s standard starter kit for new buildings—wiring, locks, and inspectors included. It replaces one-off accounts and wiki hopes. GameLift is for games (out of scope here), and ditching Organizations undoes governance.
Full Explanation
AWS Control Tower automates a multi-account landing zone with Organizations, baseline accounts, and guardrails (preventive SCPs and detective controls) so new accounts start from a governed template. That addresses ad hoc sprawl. Wiki-only exceptions, disabling Organizations, or unrelated services such as GameLift (out of scope for SAP-C02 architectures) do not establish standardized landing-zone governance for the county.