AWS Certified CloudOps Engineer - Associate
AWS Config and Conformance Packs
How to turn a compliance requirement into a continuously evaluated control: the configuration recorder and configuration items, rule triggers and evaluation modes, automatic remediation through Systems Manager, and packaging rules for an entire organization.
Advanced 30 minutes 7 Learning Objectives
- Explain what a configuration item is and how the configuration recorder produces one
- Distinguish AWS Config from CloudTrail for a given evidence requirement
- Select the correct rule trigger type and evaluation mode for a stated requirement
- Interpret the 4 rule evaluation results, including NOT_APPLICABLE
- Configure automatic remediation with a Systems Manager Automation document and describe its retry behavior
- Deploy a conformance pack to an account or an organization and read its compliance score
- Choose between an aggregator, an organization rule, and an organization conformance pack for a multi-account requirement