SAP on AWS
Landing Zones & Multi-Account Governance
28 flashcards · answers and review in the app
What does the Shared Services OU typically contain in an SAP landing zone?
What are the two options for implementing an AWS landing zone?
How can AWS Service Catalog help an SAP BASIS admin deploy a system consistently?
What is the invitation/handshake process in AWS Organizations, and can an account belong to two organizations?
What are the three types of AWS Control Tower guardrails, and how is each implemented?
What are Service Control Policies (SCPs) in AWS Organizations, and what's their key power?
How does the AWS landing zone work with RISE with SAP?
What is special about the AWS Organizations management account?
What is AWS Service Catalog, and who consumes it?
What is the typical OU structure of a baseline AWS landing zone for SAP?
What is the AWS Control Tower Account Factory?
What are the key terms in AWS Service Catalog (product, portfolio, constraint)?
What is AWS Organizations, and what two capabilities does it unlock for a multi-account SAP estate?
What is AWS Control Tower, and how does it relate to AWS Organizations?
How does the 'blast radius' concept justify separating production from non-production accounts?
What are the two AWS Organizations feature sets, and how do they differ?
What does the AWS Organizations AI opt-out policy do, and why does it matter for SAP accounts?
What are the main reasons to use a multi-account strategy on AWS?
What is a delegated administrator in AWS Organizations?
What is an AWS Organizations tag policy, and give an SAP example.
How does AWS Organizations integrate with other AWS services (trusted access / service-linked roles)?
How does AWS Control Tower compare with a custom-built landing zone?
How should you design AWS Organizations OUs — and how should you NOT?
What are the four core structural concepts in AWS Organizations, and what does each represent?
What is an AWS landing zone?
What does AWS Control Tower automatically create when it sets up a landing zone?
What are the AWS Control Tower customization options (CfCT, AFC, AFT), and how do they differ?
What is an air-gapped (data bunker) AWS account used for?