A team wants to define their entire AWS environment — VPCs, databases, and roles — as version-controlled templates that can be deployed repeatably. Which service does this?
A.AWS Config
Config records and evaluates configuration — it doesn't build infrastructure.
B.AWS CloudFormation
Correct. Declarative templates → repeatable stacks.
C.Amazon CloudWatch
CloudWatch monitors — it doesn't provision.
D.AWS Trusted Advisor
Trusted Advisor recommends improvements, not deployment.
Why this answer
CloudFormation is infrastructure as code: you declare resources in YAML/JSON templates and it provisions them consistently — with drift detection, rollbacks, and repeatable stacks. Config audits configuration; it doesn't provision.
Correct answer: B · Last reviewed 2026-10-28
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Core AWS Services practice session.
Practice Core AWS Services