CLF-C02 Question 93
Select 3Your organization recently migrated workloads to AWS and needs to ensure compliance with internal policies and external regulations. Which AWS services can help you monitor resource changes, audit user activity, and generate compliance reports?
- A
AWS CloudTrail
- B
Amazon CloudWatch
- C
AWS Config
- D
AWS Lambda
- E
AWS Audit Manager
Show answer and explanation
Correct answers: A, C, E
Explanation
Governance and compliance in AWS require services that provide visibility into user actions, resource configurations, and compliance status. AWS CloudTrail, AWS Config, and AWS Audit Manager are designed to help organizations meet these needs. CloudTrail tracks activity and API calls, Config monitors resource changes and compliance, and Audit Manager assists with audit preparation and compliance reporting. While Amazon CloudWatch and AWS Lambda are valuable AWS services, they do not directly aid in governance or compliance tasks.
- A. Correct.
AWS CloudTrail tracks user activity and API calls, helping you audit actions taken in your AWS environment. It plays a key role in governance and compliance.
- B. Incorrect.
Amazon CloudWatch is primarily used for monitoring system metrics and logs but does not directly provide auditing or compliance reporting capabilities.
- C. Correct.
AWS Config helps track resource configurations, identify resource changes, and evaluate compliance with policies, making it essential for governance and compliance.
- D. Incorrect.
AWS Lambda is a serverless compute service used to run code in response to events. While useful in many scenarios, it is not a governance or compliance tool.
- E. Correct.
AWS Audit Manager helps automate the collection of evidence to simplify audit preparation and generate compliance reports, making it an important tool for compliance.