A company ensures compliance with its own corporate standards via AWS Service Catalog to govern and provision all infrastructure. However, you have to implement an automated solution to avoid resource usage beyond the predefined budget. Which statement is true about developing this solution?

Answer options:

A.Use AWS Control Tower to detect and record configuration changes to provisioned AWS Service Catalog product instances part of a portfolio and automatically reconcile changes as corrective actions. Rely on AWS Systems Manager Parameter Store to keep track and keep the limit of the maximum number of instances of the same product.
B.Use AWS Config to record configuration changes to provisioned AWS Service Catalog product instances part of a portfolio and create custom rules to trigger corrective actions. Rely on AWS Systems Manager Parameter Store to keep track and keep the limit of the maximum number of instances of the same product.
C.Use AWS Control Tower to detect and record configuration changes to provisioned AWS Service Catalog product instances part of a portfolio and automatically reconcile changes as corrective actions and to keep track and keep the limit of the maximum number of instances of the same product.
D.Use AWS Config to record configuration changes to provisioned AWS Service Catalog product instances part of a portfolio and create custom rules to trigger corrective actions. Rely on AWS Control Tower to keep track and keep the limit of the maximum number of instances of the same product.

Correct Answer: B
The question highlights the use of AWS Service Catalog to govern all infrastructure and mentions a need to keep usage within a predefined budget. AWS Config can record configuration changes to AWS Service Catalog products and rely on custom rules to trigger AWS Lambda functions with corrective actions. If AWS Systems Manager Parameter Store is in place, it is possible to define a default, maximum and other limits to co-relate to regarding product instances.
Incorrect Answers:
Options A, C, D are incorrect because AWS Control Tower helps set up and govern a new, secure, multi-account AWS environment that is not the scenario in the question. However, it is possible to use guardrails combined with AWS Organizations service control policies (SCPs) to prevent configuration changes and AWS Config rules to detect non-conformance continuously.
References:
https://go.aws/2xPIERn
https://amzn.to/2LibQU9