CLF-C02 Question 92
Select 3A financial services company needs to ensure that their AWS resources are compliant with industry regulations. They also want to monitor changes to their resources and create a report for internal audits. Which combination of AWS services would best help them achieve this goal?
- A
AWS CloudTrail
- B
AWS Config
- C
Amazon CloudWatch
- D
AWS Audit Manager
- E
Amazon S3
Show answer and explanation
Correct answers: A, B, D
Explanation
To address compliance and internal audit requirements, the combination of AWS CloudTrail, AWS Config, and AWS Audit Manager is ideal. CloudTrail records API activity for governance, AWS Config ensures resource configurations meet compliance standards, and Audit Manager automates audit evidence collection and reporting. While Amazon CloudWatch and Amazon S3 are useful in other contexts, they do not directly address compliance or governance in the same way as the selected services.
- A. Correct.
AWS CloudTrail enables governance, compliance, and operational and risk auditing by recording account activity and API usage across your AWS environment. It is essential for tracking changes to resources and ensuring compliance.
- B. Correct.
AWS Config provides a detailed inventory of AWS resources and continuously evaluates resource configurations against desired configurations, making it valuable for ensuring compliance with industry regulations.
- C. Incorrect.
Amazon CloudWatch is primarily used for monitoring performance metrics and operational data, such as CPU utilization and memory usage. While valuable for monitoring, it does not directly address compliance or audits.
- D. Correct.
AWS Audit Manager helps automate the collection of evidence required for audits and simplifies creating reports. This makes it crucial for internal audit reporting and compliance efforts.
- E. Incorrect.
Amazon S3 is a storage service that can store audit logs or reports but does not provide governance, compliance, or auditing capabilities directly.