SOA-C03 - Security and Compliance - Section 4.2

Audit and troubleshoot access using AWS CloudTrail, IAM Access Analyzer and the IAM policy simulator, and govern multiple accounts with AWS Organizations, service control policies and AWS Control Tower.

Audit and troubleshoot access by replaying policies in the IAM policy simulator, reviewing external access findings in IAM Access Analyzer, and tracing API calls in AWS CloudTrail. Govern multi-account environments by applying service control policies through AWS Organizations and enforcing guardrails via AWS Control Tower.

Examworthy is not affiliated with or endorsed by Amazon Web Services. Original, blueprint-aligned practice material only.