SCS-C02 Question 456
Select 3An organization is implementing a tagging strategy to enhance security and governance across their AWS accounts. Which of the following best practices should be followed to ensure the tags effectively support security monitoring and compliance requirements?
- A
Define and enforce a standardized set of tag keys across all resources.
- B
Use personally identifiable information (PII) in tag values to help with user identification.
- C
Implement AWS Config rules to validate that required tags are applied to resources.
- D
Restrict access to tag modification using AWS Identity and Access Management (IAM) policies.
- E
Utilize dynamically generated random tag keys to ensure uniqueness across resources.
Show answer and explanation
Correct answers: A, C, D
Explanation
Tagging is a fundamental practice for effective resource management, security monitoring, and compliance in AWS environments. Best practices include defining consistent tag keys, using AWS Config for tag enforcement, and restricting unauthorized tag modifications. These practices ensure that security and governance policies are effectively implemented and maintained while avoiding practices that compromise security, such as including sensitive information in tag values or using random tag keys.
- A. Correct.
Defining and enforcing a standardized set of tag keys ensures consistency across resources, which is critical for security monitoring and compliance reporting.
- B. Incorrect.
Using PII in tag values is a security risk and goes against AWS best practices. Tags should not include sensitive information.
- C. Correct.
Implementing AWS Config rules to validate tags ensures that governance and compliance requirements are consistently met.
- D. Correct.
Restricting access to tag modifications using IAM policies prevents unauthorized changes that could undermine security or compliance efforts.
- E. Incorrect.
Using dynamically generated random tag keys does not align with best practices for tagging, as it reduces consistency and makes resource management more difficult.