You are hired as a senior DevOps engineer in a large organization and you manage AWS resources in multiple AWS regions. You need to enable Amazon GuardDuty and add new AWS Config rules in all AWS regions. You have already prepared CloudFormation templates to deploy the resources. Which of the following options is the easiest one to create the CloudFormation stacks in multiple regions?

Answer options:

A.Upload the CloudFormation templates in a global S3 bucket. Choose the templates and select regions when creating stacks in CloudFormation.
B.Create CloudFormation StackSets to manage the stacks. Choose the regions in which you want to deploy stacks.
C.Configure a Lambda function that launches CloudFormation stacks through AWS CLI create-stack. Specify different AWS regions through the --region option.
D.Configure a CloudFormation stack resource group in which AWS regions are specified. Launch the CloudFormation stack in the resource group to deploy resources in all specified AWS regions.

Correct Answer – B
Through CloudFormation StackSets, you can easily choose different regions to deploy the stacks. Check https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-getting-started-create.html for how to create a new StackSet.
Option A is incorrect: Because when creating stacks in CloudFormation, you cannot select different AWS regions. This option does not resolve the mentioned issue.
Option B is CORRECT: When creating a StackSet, you can add a list of regions as follows:
You can also choose to add all regions at one time.
Option C is incorrect: Because you may have to call create-stack and modify the --region option multiple times if the stack needs to be deployed in several regions. Option B is easier than this one.
Option D is incorrect: Because the resource group does not resolve this problem and you can not specify AWS regions in the resource group.