AWS Certified DevOps Engineer – ProfessionalConfiguration Management and Infrastructure as CodeMedium
A large enterprise is adopting a multi-account strategy with a centralized security team responsible for defining and enforcing approved AWS resources and configurations. Development teams across various business units need to provision infrastructure frequently, but only using pre-approved, compliant CloudFormation templates. They also require a self-service portal where developers can provision these resources without needing direct IAM permissions to create underlying AWS services. Which AWS service is best suited to meet these requirements?
- AAWS Organizations
- BAWS Service Catalog
- CAWS CloudFormation StackSets
- DAWS Control Tower
Show answer & explanationAnswer & explanation
Correct answer: B. AWS Service Catalog
AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS. It provides a self-service portal for users to provision these services, while the security team retains control over the underlying CloudFormation templates and configurations.
Why the other options are wrong
- A. AWS Organizations helps manage multiple AWS accounts but does not offer a self-service provisioning portal for compliant resources based on CloudFormation templates.
- C. AWS CloudFormation StackSets deploy common infrastructure across multiple accounts/Regions but do not provide a self-service portal or enforce pre-approved templates in the way Service Catalog does for end-users.
- D. AWS Control Tower sets up and governs a secure, multi-account AWS environment but does not directly provide a self-service catalog for developers to provision pre-approved CloudFormation templates.
AWS Service Catalog
AWS Service Catalog enables organizations to create, govern, and manage a catalog of IT services that are approved for use on AWS, providing a self-service portal for end-users.
- Centralized catalog of approved resources.
- Self-service provisioning for end-users.
- Enforces compliance and governance.
- Uses CloudFormation templates as products.
Memory trick: Service Catalog is your secure shopping mall for pre-approved AWS products.