Exam AWS DevOps Engineer Professional topic 1 question 22 discussion

The answer is D. https://docs.aws.amazon.com/servicecatalog/latest/adminguide/catalogs_constraints_template-constraints.html

I'll go with C

D because compliance must always be declarative.

Answer is C : https://saturncloud.io/blog/how-to-create-a-cloudformation-stack-with-resources-in-multiple-regions/

The Answer is C: https://docs.aws.amazon.com/servicecatalog/latest/adminguide/catalogs_constraints_template-constraints.html

Yes its C. Option D suggests creating AWS Service Catalog products with approved CloudFormation templates, which is a valid option for deploying resources in accordance with company policy. However, the question specifically mentions using AWS CloudFormation for infrastructure deployment, and using AWS Service Catalog may not be the best fit for this scenario.

I'm going for C baby.

service catalog uses stacksets and can enforce tag and restrict resources AWS Customer case with tag enforcement https://aws.amazon.com/ko/blogs/apn/enforce-centralized-tag-compliance-using-aws-service-catalog-amazon-dynamodb-aws-lambda-and-amazon-cloudwatch-events/ And Youtube video showing how to restrict resources per user with portfolio https://www.youtube.com/watch?v=LzvhTcqqyog

D https://aws.amazon.com/blogs/mt/how-to-set-up-a-multi-region-multi-account-catalog-of-company-standard-aws-service-catalog-products/

stack sets doesnt restrict users on tagging and other stuff. Service catalog is the perfect usecase here.

A and B are excluded because it's not a good idea to detect. D looks weird.

I will go with D

D. Create AWS Service Catalog products with approved CloudFormation templates. AWS Service Catalog allows the company to create, manage, and distribute approved products in the form of CloudFormation templates. It allows the company to control the use of AWS resources by imposing constraints on the templates and products available, such as resource tagging, regions, and IAM permissions. Using AWS Service Catalog, the company can define products with specific CloudFormation templates and constraints, and allow developers to deploy the appropriate version of the application, while ensuring that the deployment adheres to company policies and resource requirements. Additionally, AWS Service Catalog can be used to restrict the deployment to specific regions, and by creating products, it allows the company to keep track of the versions of the application that are deployed.

The answer is D. The best way to impose template and StackSet constraints is through Service Catalog. https://docs.aws.amazon.com/servicecatalog/latest/adminguide/catalogs_constraints_template-constraints.htmlns

D because there is no such thing as “approved Cloudformation Templates”

Ans = D: https://docs.aws.amazon.com/servicecatalog/latest/adminguide/constraints-stackset.html

I'll go with D