Question 460
Which high-level AWS choice is most appropriate for this business requirement? A cloud security analyst wants centralized evidence of which supported resource configurations changed over a period of months.
Explanation
Correct Answer
Review AWS Config resource history for the selected resource and period. The case involves: A cloud security analyst wants centralized evidence of which supported resource configurations changed over a period of months. The central AWS principle is that AWS Config tracks configuration history for supported resource types over time. What matters is: Look for configuration timeline questions rather than operational CPU utilization. Recommended direction: Review AWS Config resource history for the selected resource and period. Expected indication of success: The auditor can identify material configuration changes and their recorded times. Caveat: Resource-history coverage depends on recorder scope and retention settings.
Incorrect Answers
AWS Artifact is the source for AWS-provided third-party compliance reports and agreements. That addresses a different mechanism; this question turns on Review AWS Config resource history for the selected resource.
AWS Config supports continuous assessment of supported AWS resource configurations against rules. In the present case the governing issue is AWS Config tracks configuration history for supported resource types, which this does not resolve.
AWS CloudTrail records supported account API and management activity for auditing. It does not verify the requested outcome; here the decisive check concerns Review AWS Config resource history for the selected resource.