A company has customers worldwide and wants to use automation to secure systems and network infrastructure. The security team must be able to track and audit all incremental infrastructure changes. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Use AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes..
Why this is the answer
The correct solution is to use AWS CloudFormation to set up the infrastructure and AWS Config to track changes. CloudFormation allows you to define your infrastructure as code, enabling automation, version control, and consistent deployments across regions. This meets the requirement for automated infrastructure setup. AWS Config continuously monitors and records your AWS resource configurations, allowing you to track all incremental changes, audit configurations, and assess compliance over time. This directly addresses the need to track and audit all incremental infrastructure changes. AWS Organizations is for managing multiple AWS accounts, not for defining or deploying infrastructure. AWS Service Catalog allows organizations to create and manage catalogs of IT services approved for use on AWS, but it does not track incremental infrastructure changes.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed