A company runs production workloads in its AWS account. Multiple teams create and maintain the workloads. The company needs to be able to detect changes in resource configurations. The company needs…

Question

Options

• AUse AWS Config. Start the configuration recorder for AWS resources to detect changes in
• BUse AWS CloudFormation. Initiate drift detection to capture changes in resource configurations.
• CUse Amazon Detective to detect, analyze, and investigate changes in resource configurations.
• DUse AWS Audit Manager to capture management events and global service events for resource

• A
  89% (41)
• B
  7% (3)
• C
  2% (1)
• D
  2% (1)

Explanation

AWS Config is a service designed to assess, audit, and evaluate the configurations of AWS resources. It continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. By starting a configuration recorder, AWS Config will capture changes to supported resource types as configuration items - without the need to modify any of the existing resources. This provides a full history of configuration changes and is specifically intended for exactly this use case.

No community discussion yet for this question.