SAP-C02 Question 171
Select 4A company is operating in a highly regulated environment and needs to implement a robust change management process for its AWS infrastructure. The solution must ensure that all changes are reviewed, approved, and documented while minimizing disruption to production workloads. Which combination of AWS services and features can help achieve this goal?
- A
AWS Systems Manager Change Manager for managing and tracking changes with workflows and approvals
- B
AWS CloudTrail for auditing API calls and tracking changes made to resources
- C
Amazon CloudWatch Logs to automatically approve and execute changes based on log triggers
- D
AWS Config with rules to monitor and enforce compliance for resources after changes are made
- E
AWS Trusted Advisor to automatically approve changes based on best practice checks
- F
Amazon EventBridge for triggering notifications and workflows when changes are detected
Show answer and explanation
Correct answers: A, B, D, F
Explanation
The combination of AWS Systems Manager Change Manager, AWS CloudTrail, AWS Config, and Amazon EventBridge provides a comprehensive solution for managing changes in a regulated environment. Systems Manager Change Manager handles workflows and approvals, CloudTrail ensures auditability of changes, Config enforces compliance, and EventBridge enables integration and automation of notifications and workflows. These tools together ensure a robust change management process while maintaining accountability and minimizing disruptions.
- A. Correct.
AWS Systems Manager Change Manager facilitates change management by providing workflows, approval mechanisms, and documentation for infrastructure changes, making it an essential tool for this scenario.
- B. Correct.
AWS CloudTrail provides audit logs of API calls, enabling traceability and accountability for all resource changes, which is critical in regulated environments.
- C. Incorrect.
Amazon CloudWatch Logs is a monitoring service and does not provide features for change approvals or workflows. It is not suitable for managing and tracking changes directly.
- D. Correct.
AWS Config helps monitor and enforce compliance by evaluating resource configurations against defined rules. This ensures that changes comply with regulatory and organizational policies.
- E. Incorrect.
AWS Trusted Advisor provides recommendations for best practices but does not support change approval workflows. It cannot be used to directly implement a change management process.
- F. Correct.
Amazon EventBridge can detect changes and trigger workflows or notifications, making it useful for integrating with other services to manage and track changes.