AWS Certified Cloud Practitioner — Question 832

A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources.

Which AWS service should the company use?

Answer options

• A. AWS Config
• B. AWS Secrets Manager
• C. AWS CloudTrail
• D. AWS Trusted Advisor

Correct answer: A

Explanation

AWS Config is designed to continuously monitor, record, and evaluate the configurations of AWS resources, and it supports automatic remediation using AWS Systems Manager documents. AWS CloudTrail tracks user activity and API usage but does not evaluate configurations or perform remediation. AWS Secrets Manager manages secrets, while AWS Trusted Advisor provides recommendations for cost, security, and performance but does not record configuration history or remediate resources directly.