AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 181

Question

A company requires its internal business teams to launch resources through pre-approved AWS CloudFormation templates only. The security team requires automated monitoring when resources drift from their expected state. Which strategy should be used to meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Allow users to deploy CloudFormation stacks using AWS Service Catalog only. Enforce the use of a launch constraint. Use AWS Config rules to detect when resources have drifted from their expected state. AWS Config tracks resource configuration changes and evaluates compliance. AWS CloudFormation provisions infrastructure as code repeatably.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 181