6.0a

Learning Objectives

You can establish detective controls that discover changes to your AWS infrastructure and apply rules that you define to determine if the resource is compliant or noncompliant.

By the end of this lesson, you will be able to do the following:

• Describe AWS Config and Config Rules
• Configure Managed Rules to run on your AWS account
• Run Managed Config Rules from the console to detect encryption for specific AWS resources
• Run Managed Config Rules using CloudFormation to detect encryption for specific AWS resources