Which AWS service allows you to manage cloud resources to achieve governance at scale?

The service that allows you to manage cloud resources to achieve governance at scale is AWS Control Tower. AWS Control Tower provides a centralized console that helps organizations set up and govern their multi-account AWS environment following best practices. It enables businesses to establish governance across their accounts with pre-configured policies, guardrails, and a consistent set of controls.

With AWS Control Tower, you can automate the provisioning of accounts, enforce security best practices, and ensure compliance with organizational policies. This governance framework is crucial for large organizations needing to manage multiple AWS accounts while maintaining oversight and control across their cloud resources.

While other services like AWS Service Catalog, AWS Config, and AWS CloudFormation play significant roles in resource management and configuration, they do not provide the comprehensive governance structure suited for large-scale operations across multiple AWS accounts that AWS Control Tower offers. AWS Service Catalog primarily focuses on provisioning and managing products, AWS Config tracks resource configuration changes, and AWS CloudFormation is centered around the automation of resource provisioning rather than overarching governance.