Which AWS service provides this functionality?

Explanations:

AWS Config is primarily used for resource configuration tracking and compliance auditing, not for managing portfolios of IT workloads.

AWS Service Catalog allows organizations to create and manage approved catalogs of IT services, enabling users to deploy these services efficiently and in compliance with governance standards.

AWS Systems Manager provides operational data from multiple AWS services to automate tasks across resources, but it does not specifically manage a portfolio of approved IT workloads.

AWS CloudFormation is used for defining and provisioning AWS infrastructure as code but does not manage a portfolio of workloads that the company approves for use.