SAA-C03 Q85 · Multi-Account

Question

A company wants to implement new security compliance requirements for its development team to limit the use of approved Amazon Machine Images (AMIs). The company wants to provide access to only the approved operating system and software for all its Amazon EC2 instances. The company wants the solution to have the least amount of lead time for launching EC2 instances. Which solution will meet these requirements?

Accepted Answer

**Answer A: AWS Service Catalog with pre-built AMIs** satisfies every requirement:

1. **Security compliance enforcement**: AWS Service Catalog provides a **governance layer** — developers can ONLY launch products defined in the portfolio. They cannot bypass this to launch unauthorized AMIs. This is a **preventive control**, not a detective one.

2. **Only approved OS and software**: The portfolio contains EC2 products configured with **pre-approved AMIs that already have all required software pre-installed**. Developers have no ability to choose a different AMI.

3. **Least lead time for launching**: Since the AMIs already contain the approved OS AND all software pre-installed, instances are **ready to use immediately upon launch**. There is no post-launch installation step, no waiting fo

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips