AWS Certified Cloud Practitioner (CLF-C02) — Question 466
A company wants to use a centralized AWS service to enforce compliance with the organizational business standards. The company wants to use an AWS service that can govern and control who can deploy, manage, and decommission AWS resources.
Which AWS service will meet these requirements?
Answer options
- A. Amazon CloudWatch
- B. AWS Service Catalog
- C. Amazon GuardDuty
- D. AWS Security Hub
Correct answer: B
Explanation
AWS Service Catalog allows organizations to centrally manage and govern the deployment, management, and decommissioning of approved AWS resources to ensure compliance with business standards. Amazon CloudWatch is primarily used for monitoring and observability rather than governance of resource provisioning. Amazon GuardDuty and AWS Security Hub are security-focused services for threat detection and posture management, respectively, and do not control the lifecycle of resource deployments.