Q46 — AWS DOP-C02 Ch.1

Question 46 of 100 | ← Chapter 1

A company wants to use AWS CloudFormation for infrastructure deployments. The company has strict tagging and resource requirements and wants to restrict deployments to a single Region. Developers will need to deploy multiple versions of the same application.

• A. Create an AWS Trusted Advisor check to identify and remediate unauthorized CloudFormation stack sets.
• B. Create a CloudFormation drift detection operation to identify and remediate unauthorized CloudFormation stack sets.
• C. Use an approved CloudFormation template to create a CloudFormation stack set.
• D. Use an approved CloudFormation template to create an AWS Service Catalog product. ✓

Correct Answer: D. Use an approved CloudFormation template to create an AWS Service Catalog product.

Explanation

AWS Service Catalog enables organizations to centrally manage approved IT services—including CloudFormation templates—ensuring users deploy only pre-approved, compliant resources. Per AWS documentation, Service Catalog enforces deployment region, resource tagging, and parameter constraints without exposing raw templates. Options A and B focus on post-deployment detection rather than prevention. Option C’s stack sets support multi-Region deployments but lack built-in support for managing multiple application versions under policy. Option D standardizes templates via Service Catalog, enforcing compliance while supporting concurrent versioning.