Home › AWS Security › cloudcomputing › scsthreatresponse › Which AWS service enables 'continuous compliance…
Which AWS service enables 'continuous compliance' by recording resource config changes and evaluating rules — used to detect security drift like public S3 buckets, unencrypted EBS volumes, or open security groups?
AAmazon EBS
BAWS Snowball
CAWS Config (with managed + custom rules + automatic remediation)
DAmazon Route 53
Answer & Solution
Correct answer: C. AWS Config (with managed + custom rules + automatic remediation)
Config + rules is AWS's continuous-config-compliance engine (per SCS-C02 §1.2, §6.3). The others aren't compliance engines.
Related questions
Which AWS feature provides an audit-trail of every IAM principal action across the AWS accAfter detecting that a long-lived IAM access key has been leaked publicly, which response Which AWS service continuously scans EC2 instances and container images for software vulneWhich AWS service lets a responder query large volumes of CloudTrail / VPC Flow / WAF logsWhich AWS service is the canonical event-routing bus that receives Security Hub / GuardDutWhich AWS service automates incident-response runbooks — e.g. 'on compromised credential fWhich AWS feature lets a responder capture an immutable EBS volume snapshot for forensic aAn incident-response team must IMMEDIATELY isolate a suspected-compromised Amazon EC2 inst