A team uses Terraform to manage AWS infrastructure. They want to enforce that only approved Terraform module versions are used across the organization. Which approach best enforces this in a DevOps pipeline?
-
A
Store modules in S3 and use S3 bucket policies
-
B
Use AWS Service Catalog to publish approved Terraform configurations
-
C
Use a private Terraform registry in Terraform Cloud/Enterprise with version constraints
-
D
Scan Terraform plan output with AWS Config