Amazon
DOP-C02 · Question #196
A company requires its internal business teams to launch resources through pre-approved AWS CloudFormation templates only. The security team requires automated monitoring when resources drift from…
The correct answer is C. Allow users to deploy CloudFormation stacks using AWS Service Catalog only. Enforce the use. https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-
Submitted by lars.no· Mar 6, 2026Configuration Management and Infrastructure as Code
Question
A company requires its internal business teams to launch resources through pre-approved AWS CloudFormation templates only. The security team requires automated monitoring when resources drift from their expected state. Which strategy should be used to meet these requirements?
Options
- AAllow users to deploy CloudFormation stacks using a CloudFormation service role only. Use
- BAllow users to deploy CloudFormation stacks using a CloudFormation service role only. Use AWS
- CAllow users to deploy CloudFormation stacks using AWS Service Catalog only. Enforce the use
- DAllow users to deploy CloudFormation stacks using AWS Service Catalog only. Enforce the use
How the community answered
(27 responses)- A4% (1)
- B15% (4)
- C74% (20)
- D7% (2)
Explanation
https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-
Topics
#Service Catalog#CloudFormation templates#drift detection#AWS Config
Community Discussion
No community discussion yet for this question.