AWS Account Resource Configuration Snapshot

AWS Account Resource Configuration Snapshot

Prev Question Next Question

Question

You have the requirement to get a snapshot of the current configuration of the resources in your AWS Account.

Which of the following services can be used for this purpose.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Answer - C.

The AWS Documentation mentions the following.

With AWS Config, you can do the following:

· Evaluate your AWS resource configurations for desired settings.

· Get a snapshot of the current configurations of the supported resources that are associated with your AWS account.

· Retrieve configurations of one or more resources that exist in your account.

· Retrieve historical configurations of one or more resources.

· Receive a notification whenever a resource is created, modified, or deleted.

· View relationships between resources.

For example, you might want to find all resources that use a particular security group.

For more information on AWS Config , please visit the below URL:

http://docs.aws.amazon.com/config/latest/developerguide/WhatIsConfig.html

The correct answer to the question is C. AWS Config.

AWS Config is a fully-managed service that provides you with an inventory of the resources in your AWS account, as well as a history of configuration changes to those resources. This service enables you to assess, audit, and evaluate the overall compliance of your AWS resources against the desired configuration settings.

With AWS Config, you can obtain detailed information about all your resources, such as EC2 instances, VPCs, security groups, and IAM users, among others. The service can track the relationships between these resources, and provide you with a visual representation of your AWS infrastructure.

Moreover, AWS Config can be used to monitor and manage compliance rules for resources, alert you when a resource deviates from the compliance rules, and remediate the non-compliant resources automatically. AWS Config can also integrate with other AWS services, such as AWS CloudTrail, AWS Systems Manager, and AWS Lambda.

In contrast, AWS CodeDeploy is a service that automates the deployment of code updates to Amazon EC2 instances, on-premises instances, and serverless Lambda functions. AWS Trusted Advisor provides you with best practices and recommendations to optimize your AWS infrastructure, improve security, and save costs. AWS IAM is a service that enables you to manage access to AWS resources securely.

Therefore, AWS Config is the most appropriate service for obtaining a snapshot of the current configuration of the resources in your AWS account.