Question

Difficulty: EasyAWS Management, Governance, and Developer Tools

A company wants to record the configuration history of its AWS resources and automatically check if these configurations comply with the company's internal security guidelines. Which AWS service should the company use to meet this requirement?

  1. A
    AWS CloudFormation
  2. B
    AWS CloudTrail
  3. AWS ConfigAnswer
  4. D
    Amazon CloudWatch

Answer

AWS Config
AWS Config is designed to record configurations of AWS resources and evaluate them against desired compliance guidelines.

Step-by-Step Solution

1
Analyze the core business requirement
The company needs to track changes in resource configurations over time and compare those configurations to compliance rules.
This establishes the type of service needed: configuration tracking and compliance management.
2
Select the AWS service that handles configuration compliance
AWS Config matches the requirements precisely.
AWS Config tracks configuration changes of AWS resources and evaluates them against custom or managed compliance rules.

Key Concept

Continuous monitoring and configuration auditing using AWS Config
Estimated Time:45s
Rate this question