Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 31 discussion

Answer from ChatGPT: Yes, you can use AWS Config to create tags for your resources. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. You can use AWS Config to create rules that automatically tag resources when they are created or when their configurations change. To create tags for your resources using AWS Config, you will need to create an AWS Config rule that specifies the tag key and value you want to use and the resources you want to apply the tag to. You can then enable the rule and AWS Config will automatically apply the tag to the specified resources when they are created or when their configurations change.

AWS Config provides a set of pre-built or customizable rules that can be used to check the configuration and compliance of AWS resources. By creating a custom rule or using the built-in rule for tagging, you can define the required tags for EC2, RDS DB and Redshift clusters. AWS Config continuously monitors the resources and generates configuration change events or evaluation results. By leveraging AWS Config, the solution can automatically detect any resources that do not comply with the defined tagging requirements. This approach eliminates the need for manual checks or periodic code execution, reducing operational overhead. Additionally, AWS Config provides the ability to automatically remediate non-compliant resources by triggering Lambda or sending notifications, further streamlining the configuration management process. Option B (using Cost Explorer) primarily focuses on cost analysis and does not provide direct enforcement of proper tagging. Option C and D (writing API calls and running them manually or through scheduled Lambda) require more manual effort and maintenance compared to using AWS Config rules.

Use AWS Config with required-tags rules to automatically and continuously check for proper tagging on EC2, RDS, and Redshift resources — with the least effort and highest reliability.

By Using AWS Config we can tag the resources, and then filter the resources which are tagged or not tagged.

AWS Config helps identify any configuration issues.

AWS Config is designed to monitor and assess the compliance of AWS resource configurations. You can use AWS Config managed rules, such as required-tags, to automatically evaluate whether resources are properly tagged. AWS Config provides a centralized dashboard to view non-compliant resources and requires minimal setup and maintenance. This is the correct answer because it provides an automated, scalable, and low-effort solution to detect resources that are not properly tagged.

Answer: A. Use AWS Config rules to define and detect resources that are not properly tagged. Explanation: Using AWS Config is the best solution because it provides a managed service to monitor and evaluate the configurations of your AWS resources continuously. Here's why AWS Config is the preferred choice: Automated Tag Compliance: Ease of Setup and Operation: Comprehensive Coverage: AWS Config can monitor a wide range of AWS resources, including Amazon EC2 instances, RDS databases, Redshift clusters, and more, ensuring that all your resources are properly tagged.

Not sure we need ChatGPT here (other than to prove what it can/can't do): answers B, C, D all require manual - and periodic - intervention. Has to be Ans A.

You can use AWS Config to create a rule that evaluates whether your resources have the required tags applied.

https://docs.aws.amazon.com/whitepapers/latest/tagging-best-practices/implementing-and-enforcing-tagging.html AWS Config (required_tag) AWS Config is a service that allows you to assess, audit, and evaluate the configurations of your AWS resources (see Resource types supported by AWS Config). In the case of tagging, we can use it to identify resources that are lacking tags with specific keys, using the required_tags rule (refer to Resource types supported by required_tags). From the earlier example, we might test for the existence of the key on all Amazon EC2 instances.

Answer-A

Has typos in the question, correct is "A company that hosts its web application on AWS wants to ensure all Amazon EC2 instance, Amazon RDS DB instances, and Amazon Redshift clusters are configured with tags." Keyword "are configured with tags", choose (A) "AWS Config rules".

I originally thought D, but after reading through the discussion I agree that option A would require less effort. D would get the job done but would require more effort so I think A is correct.

A without a doubt

AWS Config continually assesses, audits, and evaluates the configurations and relationships of your resources on AWS, on premises, and on other clouds.

Has typos in the question, correct is "A company that hosts its web application on AWS wants to ensure all Amazon EC2 instance, Amazon RDS DB instances, and Amazon Redshift clusters are configured with tags." Keyword "are configured with tags", choose (A) "AWS Config rules".

Option A is the right answer for this.