AIF-C01 Question 220
Select 3Your company is preparing for a compliance audit, and you need to ensure that all AWS resources are configured in accordance with organizational governance policies. Additionally, the audit requires you to provide evidence of compliance and historical activity logs. Which combination of AWS services can help you meet these requirements?
- A
AWS CloudTrail
- B
AWS Config
- C
Amazon Rekognition
- D
AWS Artifact
- E
AWS Trusted Advisor
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet compliance audit requirements, you need services that track changes in your AWS environment, ensure resource configurations adhere to governance policies, and provide evidence of compliance. AWS CloudTrail offers activity logs for auditing purposes, AWS Config ensures compliance with configuration policies, and AWS Artifact provides access to compliance documents. These services collectively address the audit's needs. Amazon Rekognition and AWS Trusted Advisor, while useful, are not directly relevant for governance and compliance.
- A. Correct.
AWS CloudTrail is correct because it provides detailed logs of all API activity in your AWS environment, which is crucial for tracking historical activity and meeting audit requirements.
- B. Correct.
AWS Config is correct because it helps you assess, audit, and evaluate the configurations of your AWS resources to ensure they comply with governance policies.
- C. Incorrect.
Amazon Rekognition is incorrect because it is a machine learning service for image and video analysis and does not assist with governance or compliance tasks.
- D. Correct.
AWS Artifact is correct because it provides access to compliance-related documents, such as audit reports and agreements, which are often required during audits.
- E. Incorrect.
AWS Trusted Advisor is incorrect because it primarily provides recommendations for cost optimization, security, performance, and fault tolerance, but it does not directly assist with governance or compliance documentation.