Explanation
AWS Service Catalog is the correct answer because it allows organizations to create and manage catalogs of approved IT services that are approved for use on AWS. This service helps companies maintain governance and compliance by providing a centralized way to:
- Create portfolios of approved IT workloads and applications
- Control access to AWS resources through standardized templates
- Manage versions of approved products
- Enforce compliance with organizational policies
Why the other options are incorrect:
- AWS Config: A service that assesses, audits, and evaluates the configurations of your AWS resources, but doesn't create/manage approved workload portfolios
- AWS Systems Manager: A service for managing and operating AWS resources at scale, including patching, automation, and run commands
- AWS CloudFormation: An infrastructure-as-code service for provisioning AWS resources using templates, but doesn't provide portfolio management capabilities
AWS Service Catalog specifically addresses the requirement of creating and managing approved IT workload portfolios, making it the ideal choice for organizations needing governance over their AWS usage.
