AWS Config for compliance - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is AWS Config?

AWS Config is a service that records and tracks changes to your AWS resources, helping you understand resource configurations and compliance over time.

beginner

How does AWS Config help with compliance?

AWS Config continuously monitors and records your AWS resource configurations and compares them against rules to check if they comply with your policies.

beginner

What is an AWS Config rule?

An AWS Config rule is a set of conditions that AWS Config uses to evaluate whether your AWS resources comply with your desired configurations.

intermediate

What happens when a resource is non-compliant in AWS Config?

AWS Config flags the resource as non-compliant and can trigger notifications or automated actions to help you fix the issue.

beginner

Can AWS Config track changes over time?

Yes, AWS Config keeps a history of resource configurations, so you can see how your resources changed and when, which helps in audits and troubleshooting.

What does AWS Config primarily do?

A Manages user access permissions

B Tracks and records AWS resource configurations

C Deploys applications automatically

D Monitors network traffic

AWS Config tracks and records the configurations of AWS resources to help with compliance and auditing.

What is the purpose of an AWS Config rule?

A To evaluate resource compliance against policies

B To deploy new AWS resources

C To monitor application performance

D To backup data automatically

AWS Config rules evaluate whether your AWS resources meet your defined compliance policies.

If a resource is non-compliant, what can AWS Config do?

A Automatically delete the resource

B Ignore the resource

C Flag the resource and notify you

D Change the resource configuration automatically

AWS Config flags non-compliant resources and can notify you to take action.

Which of these is NOT a feature of AWS Config?

A Real-time application monitoring

B Resource configuration history

C Compliance evaluation

D Automated remediation triggers

AWS Config does not monitor application performance; it focuses on resource configurations and compliance.

How does AWS Config help during audits?

A By scaling resources automatically

B By encrypting all data automatically

C By blocking unauthorized users

D By providing a history of resource configurations

AWS Config provides a detailed history of resource configurations, which is useful for audits.

Explain how AWS Config supports compliance management in AWS environments.

Think about monitoring, rules, and history.

Describe what an AWS Config rule is and how it works.

Focus on evaluation and compliance.