Which solution ensures resources are deployed in accordance with company policy?
Create AWS Trusted Advisor checks to find and remediate unapproved CloudFormation StackSets.
Create a Cloud Formation drift detection operation to find and remediate unapproved CloudFormation StackSets.
Create CloudFormation StackSets with approved CloudFormation templates.
Create AWS Service Catalog products with approved CloudFormation templates.
Explanations:
AWS Trusted Advisor is used for best practices recommendations but does not manage CloudFormation StackSets or enforce company policies.
Drift detection checks the current state of a stack against the deployed template but does not enforce deployment policies, such as limiting Regions or tags.
CloudFormation StackSets allow deploying resources to multiple accounts and Regions, but they do not inherently enforce strict tagging and resource requirements.
AWS Service Catalog allows creating and managing a portfolio of approved CloudFormation templates, ensuring strict policies like resource tagging and deployment limits.
I deduce that the answer is:
Create AWS Service Catalog products with approved CloudFormation templates.
I plan that the answer is:
Create AWS Service Catalog products with approved CloudFormation templates.