Your organization requires strict adherence to a change control process for its Amazon Elastic Compute Cloud (EC2) and VPC environments. The organization uses AWS CloudFormation as the AWS service to control and implement changes. Which combination of three services provides an alert for changes made outside of AWS CloudFormation? (Select three.)
A. AWS Config
B. AWS Simple Notification Service
C. AWS CloudWatch metrics
D. AWS Lambda
E. AWS CloudFormation
F. AWS Identify and Access Management
AB&E.
Lambda is not wrong if you are a developer, for network engineers, ABE are correct.
CF drift detection is better suited than Lambda.
https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-check.html
A+B+D