QuestionQ424

Content Domain 2: Security and Compliance

A company wants to use a centralized AWS service to enforce compliance with the organizational business standards. The company wants to use an AWS service that can govern and control who can deploy, manage, and decommission AWS resources.

Which AWS service will meet these requirements?

  • A Amazon CloudWatch
  • B AWS Service Catalog
  • C Amazon GuardDuty
  • D AWS Security Hub
Explanation

AWS Service Catalog lets administrators create and manage curated catalogs of approved IT services and configurations, centrally governing which resources users are permitted to deploy, manage, and decommission in line with organizational standards. CloudWatch and Security Hub focus on monitoring and security findings rather than deployment governance, and GuardDuty is a threat-detection service, not a resource-provisioning control. Learn more: AWS Service Catalog

Community Discussion

No comments yet. Be the first to start the discussion!