Answer: AWS Service Catalog

## Explanation **AWS Service Catalog** is the correct answer because it allows organizations to create and manage catalogs of approved IT services that are approved for use on AWS. This service helps companies maintain governance and compliance by providing a centralized way to: - **Create portfolios** of approved IT workloads and applications - **Control access** to AWS resources through standardized templates - **Manage versions** of approved products - **Enforce compliance** with organizational policies ### Why the other options are incorrect: - **AWS Config**: A service that assesses, audits, and evaluates the configurations of your AWS resources, but doesn't create/manage approved workload portfolios - **AWS Systems Manager**: A service for managing and operating AWS resources at scale, including patching, automation, and run commands - **AWS CloudFormation**: An infrastructure-as-code service for provisioning AWS resources using templates, but doesn't provide portfolio management capabilities AWS Service Catalog specifically addresses the requirement of creating and managing approved IT workload portfolios, making it the ideal choice for organizations needing governance over their AWS usage.

Author: Ritesh Yadav