Governance Flashcards
What is AWS Audit Manager?
A tool that produces reports for PCI compliance, GDPR, etc.
When would you use AWS Artifact?
To get AWS security and compliance-related info, e.g. compliance reports.
TRUE or FALSE:
SCPs don’t apply to the management account.
TRUE
When it comes to billing, what advantages does AWS Organizations provide?
- Only one bill for all accounts
- Take advantage of savings plans and discounts across accounts
What is the best practice for where to store CloudTrail logs?
In one single account.
What does AWS RAM do?
Allows you to share resources in one account with other accounts inside or outside your organisation.
No need to create duplicate copies in different accounts.
What is the pricing model of AWS RAM?
It’s free
Which AWS service would you use to check if your Reserved Instances or Savings Plans are under-utilized?
AWS Budgets
Which AWS service would you use to let employees know that they are close to overspending?
AWS Budgets
What simple method can you use to create very specific budgets?
Tags
What does the Well-Architected Tool do?
Measures your architecture against AWS best practices.
Which service provides guides for making your workloads more reliable, secure, efficient, and cost-optimised?
AWS Well-Architected Tool
TRUE or FALSE:
The AWS Well-Architected Tool assists in documenting your architecture decisions.
TRUE
What tool would you use to monitor the state of your infrastructure?
AWS Config
TRUE or FALSE:
AWS Config can prevent non-compliant changes being made to your infrastructure.
FALSE
It’s only a monitoring tool, but it can integrate with EventBridge to make changes.
TRUE or FALSE:
AWS Config is multi-region by default.
FALSE
You need to enable it in every region where you have resources you want to track.
What’s the difference between Trusted Advisor and the Well-Architected Tool?
Trusted Advisor:
- Real-time operational insights
- Specific resource-level recommendations.
Well-Architected Tool
- Architectural reviews
- Strategic improvements
What’s the only way to restrict what the root account can do?
By using a Service Control Policy
TRUE or FALSE?
Trusted Advisor is strictly an auditing tool, it won’t make changes for you.
TRUE
What’s the difference between AWS Artifact and Audit Manager?
Audit manager: For managing audits of your own AWS environment.
Artifact: A static repository of AWS’s own compliance reports.
What is AWS Config?
An inventory management and control tool. Allows you to track your resources.
