Which service enables you to enforce governance rules for security, operations, and compliance at scale across all your organizations and accounts?

• A. AWS Management Console
• B. AWS Control Tower
• C. AWS License Manager
• D. AWS Config

Answer: (B)

Enforcing governance across many AWS accounts requires a centralized, scalable way to apply security, operations, and compliance rules. AWS Control Tower provides a managed landing zone and guardrails that enforce policies across all accounts and organizational units within AWS Organizations. It automates provisioning of new accounts through the Account Factory, centralizes security baselines, logging, and compliance checks, and continuously enforces both preventive and detective guardrails to keep configurations and operations aligned with defined standards as your environment grows. In contrast, the other services don’t provide this holistic, cross-account governance: the management console is just a user interface, license manager focuses on tracking software licenses, and config is mainly for auditing resource configurations rather than enforcing policy across many accounts at scale.