Multi-account governance with Organizations, SCPs and Config

DOP-C02 · Security and Compliance · Updated

Enforce guardrails across accounts with SCPs, Control Tower, AWS Config conformance packs and IAM roles, and secure secrets, keys and images.

This lesson is part of full DOP-C02 access

The first 2 DOP-C02 lessons are free. Full access opens every lesson with its practice questions, and the exam-style DOP-C02 question bank.

In this lesson
  • Preventive versus detective
  • Detective controls at scale
  • Access patterns
  • Secrets, keys and images
  • Exam traps
  • Practice questions

Get full access Try the free practice exam Log in

DOP-C02 course outline

All 6 lessons · Course overview
  1. CodePipeline and CodeDeploy deployment strategiesSDLC Automation Free
  2. CloudFormation updates, drift and StackSetsConfiguration Management and IaC Free
  3. High availability and disaster recovery on AWSResilient Cloud Solutions Full access
  4. CloudWatch metrics, alarms and log analysisMonitoring and Logging Full access
  5. EventBridge and automated incident responseIncident and Event Response Full access
  6. Multi-account governance with Organizations, SCPs and ConfigSecurity and Compliance Full access