Apply | AWS Practice

Choose one answer

A company expects hundreds of workload accounts. It needs repeatable account creation, central workforce access, inherited controls by environment, and protected central logs. Which architecture best fits?

Put every workload in one account and separate teams with resource tags.Create accounts manually and let each team create IAM users and its own audit bucket.Use Organizations consolidated billing without OUs, controls, or an account-provisioning process.Use a Control Tower landing zone with governed OUs, Account Factory, IAM Identity Center permission sets, and dedicated log archive and audit accounts.