Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 170 discussion

Answer is A AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.

I will also go with A. https://aws.amazon.com/config/

Trusted Advisor draws upon best practices learned from serving hundreds of thousands of AWS customers. Trusted Advisor inspects your AWS environment, and then makes recommendations when opportunities exist to save money, improve system availability and performance, or help close security gaps. It seems no relationship with "identifying all open Amazon S3 buckets and documenting any modifications to their setup"

AWS Config

Its AWS Config for sure

I'll got with A: AWS Config enables you to assess and audit and receive a notification whenever a resource is created, modified, or deleted. https://aws.amazon.com/it/blogs/security/how-to-use-aws-config-to-monitor-for-and-respond-to-amazon-s3-buckets-allowing-public-access/

Having 4 minimum instances meets the SLA and keeps costs down. If an AZ goes down, more instances can be quickly spun up, this should not violate the SLA. No need to waste money on extra instances.

A is my take

Aws Config is about configuration history & change; https://www.linkedin.com/pulse/aws-config-rules-vs-trusted-advisor-shekhar-londhe/

Answer is A https://aws.amazon.com/blogs/security/how-to-use-aws-config-to-monitor-for-and-respond-to-amazon-s3-buckets-allowing-public-access/

Correct Answer is B, Trusted advisor inspects your AWS environment, and then makes recommendations when opportunities exist to save money, improve system availability and performance, or help close security gaps.

A. Enable AWS Config service with the appropriate rules

D is my take

"identifying all open Amazon S3 buckets and recording any S3 bucket configuration changes." This is what AWS Config does.

I'll take A https://aws.amazon.com/config/: "AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With Config, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines. This enables you to simplify compliance auditing, security analysis, change management, and operational troubleshooting."

A for sure

ans = B