Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 181 discussion

In the Option A, Drift detection must be run manually or scheduled, which doesn't fully meet the requirement for "automated monitoring."

Keypoint: AWS Config for drift detection

Checks if the actual configuration of a AWS CloudFormation (AWS CloudFormation) stack differs, or has drifted, from the expected configuration. A stack is considered to have drifted if one or more of its resources differ from their expected configuration. https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-check.html

anwer c

C - Service Catalog + AWS Config

C is correct: <pre-approved AWS CloudFormation templates only> means we need service catalog A and B: < Allow users to deploy CloudFormation stacks using a CloudFormation service role only>: With service role, users can modify anything in the template D: Eventbridge cannot detect drift

Use config for drift detection

Config for drift detection

You can use AWS Managed Config cloudformation-stack-drift-detection-check rule to evaluate drift in CloudFormation stacks. https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-check.html

C is correct

it's C