
Ultimate access to all questions.
You are tasked with implementing a secure and consistent deployment strategy for cloud resources using AWS CloudFormation. Your organization requires that all templates be hardened against common vulnerabilities and that any drift from the intended configuration be detected and corrected automatically. Describe the steps you would take to achieve this, including the use of AWS CloudFormation features and any additional AWS services that might be necessary.
A
Create CloudFormation templates without any hardening measures and manually monitor for drift.
B
Use AWS Config to detect drift and manually update CloudFormation templates to harden them.
C
Implement AWS CloudFormation Guard to enforce template hardening rules and use AWS CloudFormation StackSets for automatic drift detection and correction across multiple accounts and regions.
D
Ignore drift and vulnerabilities as they are not critical to deployment consistency.