Which service is primarily used to provision and manage AWS resources as code?

• A. Amazon SageMaker
• B. AWS CloudFormation
• C. Amazon Textract
• D. AWS CloudTrail

Answer: (B)

Infrastructure as code means describing your AWS resources and their relationships in files that can be version-controlled and deployed automatically. The service that provides this capability for AWS resources is AWS CloudFormation. It lets you define a template in YAML or JSON that lists the resources, their properties, and how they depend on each other. CloudFormation creates and updates a stack to reach the desired state, doing so in an idempotent way so repeated deployments converge to the same result. Change sets let you preview changes before applying them, and drift detection helps you spot differences between the template and the actual deployed resources. The other options serve different purposes: SageMaker is for machine learning workflows, Textract for extracting text from documents, and CloudTrail for auditing API activity. Therefore, CloudFormation is the best fit for provisioning and managing AWS resources as code.