AWS Certified Solutions Architect – Associate (SAA-C03) — Question 630

A company has customers located across the world. The company wants to use automation to secure its systems and network infrastructure. The company's security team must be able to track and audit all incremental changes to the infrastructure.

Which solution will meet these requirements?

Answer options

• A. Use AWS Organizations to set up the infrastructure. Use AWS Config to track changes.
• B. Use AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes.
• C. Use AWS Organizations to set up the infrastructure. Use AWS Service Catalog to track changes.
• D. Use AWS CloudFormation to set up the infrastructure. Use AWS Service Catalog to track changes.

Correct answer: B

Explanation

AWS CloudFormation enables infrastructure automation through templates, allowing secure and consistent deployments. AWS Config continuously monitors and records resource configurations, making it the ideal tool to track and audit incremental infrastructure changes. AWS Organizations is used for multi-account management rather than infrastructure deployment, while AWS Service Catalog manages approved IT services portfolios instead of tracking detailed configuration history.