CLF-C02 - Security and Compliance - Section 2.4

Recognise AWS services that aid governance, monitoring and threat detection, including Amazon CloudWatch, AWS CloudTrail, AWS Config, Amazon GuardDuty, Amazon Inspector and AWS Security Hub.

Recognise each core security monitoring service: Amazon CloudWatch for metrics and alarms, AWS CloudTrail for API activity logging, AWS Config for configuration tracking, Amazon GuardDuty for threat detection, Amazon Inspector for vulnerability assessment, and AWS Security Hub for aggregated findings. Choose the right service for a given governance or threat-detection need.

Examworthy is not affiliated with or endorsed by Amazon Web Services. Original, blueprint-aligned practice material only.