Miscellaneous

Question 1

What is AWS Config?

Answer 1

Configuration checker
Has no power to stop you from changing configuration on a resource but it can detect and report it
Can record to an S3 bucket

Config rules can be setup and events generated via EventBridge to remediate undesirable config changes (by triggering a Lambda)

Question 2

What is Amazon Macie?

Answer 2

Data security and Data Privacy service

Can discover monitor and protect data stored in S3 which can leak data if misconfigured

PII, PHI data, etc

Data identifiers - managed and custom

Managed DIs are built into the product - ML and pattern matching, detects sensitive data, common types of sensitve data

Custom DIs for your business - specific data in your organization, can use REGEX to match data

Discovery Jobs use the DIs which generate findings which you can see from console or via EventBridge events.

Multi-account architecture - one account can manage member accounts using AWS organizations or by inviting accounts - buckets across the Macie org can be checked