Home › AWS Security › cloudcomputing › scsdatagov › Which AWS service helps a security engineer coll…
Which AWS service helps a security engineer collect evidence for compliance audits — assessing AWS resource configurations against frameworks like PCI-DSS, HIPAA, SOC 2, ISO 27001?
AAWS Snowball
BAWS Audit Manager (working alongside AWS Config + Security Hub)
CAmazon EBS
DAmazon Route 53
Answer & Solution
Correct answer: B. AWS Audit Manager (working alongside AWS Config + Security Hub)
Audit Manager collects framework-mapped evidence (per SCS-C02 §6.3). The others aren't audit-evidence tools.
Related questions
Which AWS service provides a turnkey multi-account landing-zone with guardrails, account fWhich AWS Organization feature lets a security engineer enforce 'deny all use of root userWhich AWS service centrally manages multiple AWS accounts with consolidated billing, SCPs,Which AWS service automatically discovers and classifies sensitive data (PII, financial daWhich AWS feature lets a security engineer enforce 'no S3 bucket can be made public' acrosWhich Amazon S3 feature enforces WORM (write-once-read-many) data retention to protect logWhich AWS service lightweight-stores parameters + SecureString secrets, integrated with KMWhich AWS service centrally stores application secrets (DB passwords, API keys, OAuth toke