A big supermarket has maintained lots of applications in AWS developed with CloudFormation stacks. In the company, there are many development teams with various roles such as Developer, UI, QA, etc. Different roles should have different access to create, modify and delete those stacks. The DevOps team needs a centralized AWS tool to manage all these CloudFormation stacks as products. And the team can also manage the product provisioning by granting access to IAM users and groups. Which AWS tool should the team use?

Answer options:

A.Trusted Advisor
B.Systems Manager
C.AWS Service Catalog
D.CloudFormation

Correct Answer – C
There are some key concepts in AWS Service Catalog:
1, portfolio: a collection of products, together with configuration information.
2, product: a service that users want to make available for deployment on AWS, which is defined by AWS CloudFormation template.
Details can be found in
https://docs.aws.amazon.com/servicecatalog/latest/adminguide/what-is_concepts.html
Option A is incorrect: Because Trusted Advisor cannot manage CloudFormation templates or grant access to IAM users and groups.
Option B is incorrect: Because Systems Manager mainly manages EC2 instances and it does not deal with CloudFormation stacks.
Option C is CORRECT: Because Service Catalog can meet the requirement. Refer to the below for an example of portfolio. In the portfolio, there is a product which can be managed in the Service Catalog:
Option D is incorrect: Because CloudFormation can only manage stacks themselves however it cannot manage the access for IAM users or groups.