Question

Difficulty: MediumAWS Management, Governance, and Developer Tools

A company's cloud engineering team wants to allow non-technical business units to deploy pre-approved, standardized AWS environments (such as a specific Amazon RDS database paired with an Amazon EC2 instance) through a self-service portal. The team needs to maintain administrative control, enforce compliance, and manage versioning of these products. Which AWS service should the company use to meet this requirement?

  1. A
    AWS Systems Manager
  2. AWS Service CatalogAnswer
  3. C
    AWS CloudFormation
  4. D
    AWS Control Tower

Answer

AWS Service Catalog
AWS Service Catalog is correct because it enables organizations to manage catalogs of approved IT services. It allows administrators to group resources into portfolios, apply constraints, control user access, and manage versions, enabling self-service provisioning for end-users.

Step-by-Step Solution

1
Analyze the business requirements: self-service deployment of pre-approved IT environments, centralized governance, compliance enforcement, and version control of product offerings.
Identified the need for a curated governance portal rather than low-level infrastructure configuration.
This narrows down the choice to services providing centralized catalog management.
2
Compare AWS Services that manage resource creation and catalog management.
Recognized that AWS CloudFormation handles the templates, but AWS Service Catalog provides the catalog, compliance constraints, and self-service wrapper for non-technical users.
Distinguishing between raw Infrastructure as Code and curated governance services is essential for AWS Certified Cloud Practitioner governance scenarios.

Key Concept

AWS Service Catalog enables organizations to create, manage, and govern catalogs of approved IT services.
Rate this question