A company wants to use a centralized AWS service to enforce compliance with the organizational business standards. The company wants to use an AWS service that can govern and control who can deploy…

Question

Options

• AAmazon CloudWatch
• BAWS Service Catalog
• CAmazon GuardDuty
• DAWS Security Hub

• B
  94% (47)
• C
  2% (1)
• D
  4% (2)

Explanation

AWS Service Catalog is correct because it allows organizations to create and manage approved catalogs of IT services, enabling administrators to centrally control who can deploy, manage, and decommission specific AWS resources - enforcing compliance with business standards through governed self-service.

Why the distractors are wrong:

• A. Amazon CloudWatch - a monitoring and observability service for metrics, logs, and alarms; it watches what's happening, but doesn't govern who can deploy resources.
• C. Amazon GuardDuty - a threat detection service that identifies malicious activity and security threats; focused on security intelligence, not resource deployment governance.
• D. AWS Security Hub - aggregates and prioritizes security findings across AWS services; it's a security posture dashboard, not a resource provisioning control mechanism.

Memory tip: Think of Service Catalog as an "approved product menu" - only pre-vetted items are on the menu, and only authorized people can order from it. If a question mentions controlling who can deploy/manage/decommission approved resources, Service Catalog is your answer.

No community discussion yet for this question.