An administrator is running a large deployment of AWS resources that are spread across several AWS Regions. They would like to keep track of configuration changes on all the resources and maintain a configuration inventory. What is the best service they can use?

Answer options:

A.AWS CloudFormation
B.Stacks and Templates
C.AWS Backup
D.AWS Config

Correct Answer – D
AWS Config will meet the scenario requirements. The service allows the administrator to monitor and record configuration changes on AWS resources in their account. The service also allows the administrator to create a resource configuration inventory.
https://aws.amazon.com/config/
Option A is incorrect because AWS CloudFormation will allow the administrator to create templates of resources such as EC2 instances and RDS instances but not the actual configurations in these resources.
Option B is incorrect because Templates and Stacks form the basis of AWS CloudFormation. They aid in the automated deployment of whole environments but not the applications that run in them.
Option C is incorrect because AWS Backup is a fully managed service that allows the administrator to back up data in the cloud and on-premises. The service is not the most appropriate to monitor and record resource configuration changes.