Security World 2 · Guardrails Above · Stage 5

Prove It

Resources run through rules: which ones are flagged, when, what fixes them, and who sees the whole organization.

  • AWS Config rules
  • Conformance packs
  • Auto-remediation
  • Aggregators
  • Security Hub standards
  • Audit Manager
  • AWS Artifact
Domain
Security
World
Security World 2: Guardrails Above (Professional)
Game type
Organization tree: Set controls on an organization's tree and read each account's verdict.
Time
About 30 minutes on a first attempt (estimated)
Exam guides
  • SOA-C03Skill 4.1.5: Enforce compliance requirements and continuous monitoring; Skill 4.2.5: Configure reports and remediate findings from AWS services (for example, AWS Security Hub, Amazon GuardDuty, AWS Config, Amazon Inspector, AWS Security Agent)
  • DOP-C02Task 6.2: Apply automation for security controls and data protection
  • SCS-C03Skill 6.3.1: Create or enable rules to detect and remediate noncompliant AWS resources and to send notifications (for example, by using AWS Config to aggregate alerts and remediate non-compliant resources, Security Hub); Skill 6.3.2: Use AWS audit services to collect and organize evidence (for example, AWS Audit Manager, AWS Artifact); Skill 6.3.3: Use AWS services to evaluate architecture for compliance with AWS security best practices (for example, AWS Well-Architected Framework tool)
  • AIF-C01Task 5.2: Recognize governance and compliance regulations for AI systems