AWS Service Catalog for IaC Compliance
A company wants to manage its cloud resources by using infrastructure as code (IaC) templates. The company needs to meet compliance requirements. Which AWS service should the company use to meet these requirements?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The core concept is governance at scale; the common trap is confusing resource discovery or auditing tools with deployment control mechanisms.
This question addresses how to enforce compliance on infrastructure as code templates using AWS Service Catalog, which acts as a governance layer for approved cloud resources.
Candidates often choose AWS Artifact, assuming it manages internal templates, but it is strictly for external audit reports and compliance documentation.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
AWS Service Catalog enables organizations to create and manage catalogs of IT services that are approved for use on AWS. It integrates with Infrastructure as Code (IaC) templates like AWS CloudFormation, allowing administrators to define 'products' that include pre-approved configurations. By restricting users to these curated portfolios, the company ensures that every deployed resource meets specific compliance requirements without manual intervention.Why the Other Options Are Wrong
AWS Artifact is used for downloading audit reports (like SOC or ISO certifications) and agreements, not for managing internal resource deployments. AWS Resource Explorer is a search tool for discovering Amazon EC2 resources across accounts and regions, lacking any governance or approval capabilities. AWS License Manager tracks software licenses to prevent over-usage, which is unrelated to infrastructure template compliance.Community Comment Notes
The community consensus strongly supports D. As Yomijohnson noted, Service Catalog distributes 'approved collections of cloud resources,' ensuring only compliant templates are available. Another commenter emphasized that it allows you to 'centrally manage your cloud resources to achieve governance at scale.' This confirms the exam's focus on governance through standardized deployment.Official Reference
Exam Strategy
When seeing 'compliance' combined with 'templates' or 'deployment', think of Service Catalog as the gatekeeper. It doesn't just store things; it controls what can be launched based on predefined standards.
Frequently Asked Questions
Why isn't AWS Config the right answer here?
AWS Config monitors and audits configuration changes after deployment. Service Catalog enforces compliance before deployment by controlling access to approved templates.
Does Service Catalog support Terraform?
Yes, AWS Service Catalog supports provisioning from AWS CloudFormation templates and Terraform configurations, making it versatile for IaC workflows.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →