QuestionQ22

Data Protection

A security engineer needs to assess configuration changes to a particular AWS resource to confirm that the resource complies with standards. However, the security engineer is worried about cases where several configuration changes occur on the resource in rapid succession. The security engineer wants to record only that resource’s most recent configuration to show the cumulative effect of the changes.

Which solution meets this requirement in the MOST operationally efficient manner?

Explanation

AWS Config continuously detects supported-resource changes and records configuration items that represent resource configuration state. It is designed for configuration tracking and compliance evaluation, making it the managed service for obtaining the latest resource configuration after a set of rapid changes. Recording AWS Resources with AWS Config

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!