CLF-C02 Question 91
Select 3Your organization is required to meet strict compliance standards and wants to ensure that all AWS resource changes are tracked, configuration compliance is monitored, and reports can be generated for auditors. Which combination of AWS services would best address these requirements?
- A
AWS CloudTrail
- B
Amazon CloudWatch
- C
AWS Config
- D
AWS Audit Manager
- E
AWS Trusted Advisor
Show answer and explanation
Correct answers: A, C, D
Explanation
AWS CloudTrail, AWS Config, and AWS Audit Manager collectively help organizations meet governance and compliance requirements. CloudTrail enables tracking of API activity and changes, Config monitors resource configurations and compliance, and Audit Manager automates evidence collection and report generation. While CloudWatch and Trusted Advisor are valuable AWS tools, they are not directly focused on governance or compliance in this scenario.
- A. Correct.
AWS CloudTrail is used to track API calls and resource changes, providing a history of actions for auditing purposes, making it essential for governance and compliance.
- B. Incorrect.
Amazon CloudWatch is primarily used for monitoring performance metrics and setting alarms. While it aids in operational monitoring, it is not specifically focused on compliance or governance.
- C. Correct.
AWS Config continuously monitors and records the configurations of your AWS resources and evaluates them against desired compliance policies. This makes it critical for ensuring compliance.
- D. Correct.
AWS Audit Manager helps simplify the process of auditing by automating evidence collection and generating audit-ready reports. This makes it highly relevant for meeting compliance standards.
- E. Incorrect.
AWS Trusted Advisor provides recommendations to optimize performance, security, and cost. However, it does not track changes, monitor compliance, or generate audit reports, so it is not the best fit for this scenario.