AWS Certified DevOps Engineer – Professional — Question 38

A company wants to use AWS CloudFormation for infrastructure deployment. The company has strict tagging and resource requirements and wants to limit the deployment to two Regions. Developers will need to deploy multiple versions of the same application.
Which solution ensures resources are deployed in accordance with company policy?

Answer options

• A. Create AWS Trusted Advisor checks to find and remediate unapproved CloudFormation StackSets.
• B. Create a CloudFormation drift detection operation to find and remediate unapproved CloudFormation StackSets.
• C. Create CloudFormation StackSets with approved CloudFormation templates.
• D. Create AWS Service Catalog products with approved CloudFormation templates.

Correct answer: D

Explanation

The correct answer is D because creating AWS Service Catalog products with approved CloudFormation templates allows for controlled deployment that adheres to company policies. Options A and B focus on identifying and correcting unapproved resources rather than providing a proactive deployment solution, while option C only addresses the creation of StackSets without the structure and governance provided by the Service Catalog.