DOP-C02 - Security and Compliance - Section 6.3

Apply automated security controls and guardrails with AWS Config, AWS Control Tower, service control policies and CloudFormation hooks and AWS CloudFormation Guard.

Apply preventive guardrails with service control policies and AWS CloudFormation Guard rules that block non-compliant resources before they are deployed. Use AWS Control Tower to set up a landing zone and AWS Config managed rules to continuously evaluate resources against detective controls.

AWS ConfigAWS Control TowerService control policiesAWS CloudFormation Guard

More in this domain

Back to all Security and Compliance objectives, or the DOP-C02 cert hub.

Examworthy is not affiliated with or endorsed by Amazon Web Services. Original, blueprint-aligned practice material only.