AWS · SAP-C03
Central logging and compliance monitoring
SAP-C03 · Lesson 15 of 28 · 2:03:29
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SAP-C03 exam (AWS Certified Solutions Architect – Professional). In this lesson: central logging with an organization trail and Security Lake, automated compliance monitoring with Config rules, conformance packs, and aggregators, Security Hub CSPM, vulnerability scanning with Inspector, and patch management with Patch Manager. Includes three original practice questions.
Preview the topics
- The compliance team must keep every prompt and every answer of the bank’s Bedrock assistant, in every account where it runs. What should the architect turn on?
- The security team wants one place that scores every account against AWS best practices and a payment industry standard, and also gathers GuardDuty and Inspector findings. What should the architect enable?
- Three hundred accounts run EC2 instances in four Regions, and the bank wants one configuration that scans for and installs approved patches everywhere, on a schedule. What should the architect use?