CloudTrail, Config and organization governance

SCS-C03 · Security Foundations and Governance · Updated

Set up organization-wide logging with CloudTrail, enforce and remediate compliance with AWS Config, and choose between SCPs, tag policies and Config rules.

This lesson is part of full SCS-C03 access

The first 2 SCS-C03 lessons are free. Full access opens every lesson with its practice questions, and the exam-style SCS-C03 question bank.

In this lesson
  • CloudTrail
  • AWS Config
  • Prevent, detect, or record
  • Multi-account structure
  • Exam traps
  • Practice questions

Get full access Try the free practice exam Log in

SCS-C03 course outline

All 6 lessons · Course overview
  1. GuardDuty, Security Hub, Macie and InspectorDetection Free
  2. Incident response and containment on AWSIncident Response Free
  3. WAF, Shield, Firewall Manager and Network FirewallInfrastructure Security Full access
  4. IAM policy evaluation, SCPs and cross-account accessIdentity and Access Management Full access
  5. KMS keys, key policies and envelope encryptionData Protection Full access
  6. CloudTrail, Config and organization governanceSecurity Foundations and Governance Full access