Question 760
Which requirement or characteristic most clearly identifies the appropriate AWS approach? An organization wants automated collection of evidence showing how its AWS resources relate to its internal control framework.
Explanation
Correct Answer
Look for evidence collection, assessments, and mappings to compliance controls. The case involves: An organization wants automated collection of evidence showing how its AWS resources relate to its internal control framework. The central AWS principle is that aWS Audit Manager helps gather and organize supported audit evidence for assessments. What matters is: Look for evidence collection, assessments, and mappings to compliance controls. Recommended direction: Create an Audit Manager assessment using appropriate frameworks and evidence sources. Expected indication of success: Audit evidence is assembled and made available to the organization's reviewers. Caveat: Automated evidence can be incomplete and requires responsible human assessment.
Incorrect Answers
AWS Config supports continuous assessment of supported AWS resource configurations against rules. That addresses a different mechanism; this question turns on Look for evidence collection, assessments, and mappings to compliance.
AWS Security Hub aggregates and prioritizes security findings and posture information. In the present case the governing issue is AWS Audit Manager helps gather and organize supported audit, which this does not resolve.
AWS Key Management Service helps create and control keys used by integrated encryption workflows. That observation may hold without resolving the relevant issue: Look for evidence collection, assessments, and mappings to compliance.