Governance

Question 1

Whats a good use case for Organizations?

Answer 1

Setting up a central logging account into which other organizations ship logs.

Question 2

What are some benefits of Organizations

Answer 2

• Applying standards
• Central billing
• shared reserve insances
• programmatic account creation
• global control with service control policies across accounts

Question 3

How can you apply restrictions to the root account?

Answer 3

AWS organization service control policy

Question 4

What is an allow statement in a service control policy?

Answer 4

It governs what services would possibly be granted access. A service control policy never grants access.

Question 5

How would you centralize logs?

Answer 5

Have a central logging account using organizations, apply service control policies to restrict anyone from altering them

Question 6

What is AWS RAM

Answer 6

• Resource Access Manager
• Lets you share resources with other accounts (in Organization)
• Helps deduplicate resources

Question 7

What is AWS Config used for?

Answer 7

• Think Assess, Audit, Evaluate, Remediate for resources in your environment
• Get notifications when a configuration deviates
• Can remediate issues
• Lets you monitor log
• Helps you conform to standards
• https://aws.amazon.com/config/

Question 8

What are 3 vital functions of AWS Config?

Answer 8

• Standardization. Set up rules
• Automate a response when rules are violated
• History of changes

Question 9

What are the types of AD in Directory Service

Answer 9

Managed - fully built out in aws

AD Connector - on prem Ad with a tunnel to aws