
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
Which AWS service is used to track, record, and audit configuration changes made to AWS resources?
A
AWS Shield
B
AWS Config
C
AWS IAM
D
Amazon Inspector
Explanation:
AWS Config is the correct service for tracking, recording, and auditing configuration changes to AWS resources. Here's why:
Configuration History: Maintains a complete history of configuration changes for AWS resources
Compliance Tracking: Helps ensure resources remain compliant with internal policies
Change Notifications: Sends notifications when resources are created, modified, or deleted
Resource Relationships: Shows how resources are related to each other
AWS Shield: A DDoS protection service, not for configuration tracking
AWS IAM: Identity and Access Management service for controlling permissions
Amazon Inspector: Security assessment service for vulnerabilities, not configuration tracking
AWS Config provides continuous monitoring and assessment of your AWS resource configurations, making it essential for governance, compliance, and security auditing.