AWS Certified SysOps Administrator – Associate (legacy) — Question 402

A SysOps Administrator must ensure that AWS CloudFormation deployment changes are properly tracked for governance.
Which AWS service should be used to accomplish this?

Answer options

• A. AWS Artifact
• B. AWS Config
• C. Amazon Inspector
• D. AWS Trusted Advisor

Correct answer: B

Explanation

AWS Config is designed to record, audit, and evaluate the configurations of your AWS resources, making it the ideal tool to track changes driven by AWS CloudFormation for governance. AWS Artifact provides access to compliance reports, Amazon Inspector assesses application security vulnerabilities, and AWS Trusted Advisor offers optimization recommendations, none of which track resource configuration history.