A start-up firm is planning to build a new multi-account environment with AWS. They are looking for a managed service that will recommend the best practices and provide GuardRails to manage the AWS environment at scale. The new environment should be secure and scale well with future growth.
Which service is best suited to be used to meet this requirement?

Answer options:

A.AWS CloudFormation
B.AWS Organizations
C.AWS Control Tower
D.AWS Landing Zone

Correct Answer: C
AWS Control Tower can be used to set up and govern a multi-account environment with AWS. It is a managed service that follows AWS best practices to set up secure and scalable new environments and governance with GuardRails.
Option A is incorrect as AWS CloudFormation provides templates to provision AWS resources; this would not recommend the best practice and provide GuardRails to manage the AWS environment at scale.
Option B is incorrect as AWS Organizations help manage and govern multiple accounts within AWS. AWS Control Tower implements AWS Organizations to manage multiple accounts and implement SCP.
Option D is incorrect as AWS Landing Zone is AWS CloudFormation deployment framework which is a customer-managed solution to deploy landing zone implementation.
For more information on AWS Control Tower, refer to the following URL,
https://d1.awsstatic.com/events/reinvent/2019/AWS_Control_Tower_versus_AWS_Landing_Zone_GPSTEC203.pdf