AWS Config Traceability Well-Architected Pillar

Understand AWS Cloud security, governance, and compliance concepts.

Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar?

Security Correct Answer
Operational excellence
Performance efficiency
Cost optimization

Answer Correct answer: A — Using AWS Config to enable traceability is a design principle of the Security pillar.

Community Insight

The question tests knowledge of the AWS Well-Architected Framework design principles, specifically that 'Enable traceability' is a Security pillar principle, not Operational Excellence.

Using AWS Config to enable traceability aligns with the Security pillar of the AWS Well-Architected Framework. This page establishes why traceability is a core security design principle rather than operational excellence.

Choosing Operational Excellence because AWS Config is often?used for operational auditing and drift detectionG,*?-missing the explicit 'Enable traceability' Security design principle.

Community Discussion (35 comments)

Bee25 👍 1 Selected: B

Helping you know what changed? when it change? and what resource was affected? using config is operational.

HebaXX 👍 1 Selected: A

Performance Efficiency vs. Security: While Performance Efficiency focuses on optimizing cloud resources for performance, Security involves safeguarding data, systems, and applications by continuously monitoring and auditing for vulnerabilities, misconfigurations, and other risks. AWS Config and Its Relationship with Security: AWS Config helps you record and track the configuration of AWS resources, and it also evaluates changes to ensure compliance with security and operational best practices. The primary goal is to audit changes to resources, ensuring that your environment remains secure and compliant with established policies.

sonaljain 👍 1 Selected: A

Security

AKSH_SURANI 👍 1 Selected: B

Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability aligns with the "Operational Excellence" pillar of the AWS Well-Architected Framework. The Operational Excellence pillar focuses on the ability to run and monitor systems to deliver business value, and continually improve processes and procedures. AWS Config helps in achieving this by providing a detailed record of configuration changes to AWS resources, enabling auditability, compliance, and governance. It allows organizations to maintain a complete inventory of their AWS resources and track changes over time, facilitating operational excellence through enhanced visibility and control.

ManikRoy 👍 2 Selected: A

Maintaining Traceability is one of the security best practices.

sukjubae 👍 1 Selected: A

A is correct

HOYIITPUCO 👍 1 Selected: A

This paper has been archived. The latest version is available at: https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html

Oripresa 👍 1 Selected: A

son sistemas deseguridad no de excelencia operativa

Mable777 👍 3 Selected: A

Both the Security and Operational Excellence pillars of the AWS Well-Architected Framework can have relevance to the use of AWS Config, depending on the specific context. Security Pillar: AWS Config is valuable for ensuring resources are compliant with security best practices and policies. It assists in detecting drifts from the baseline and can help spot potential security vulnerabilities. From the perspective of maintaining a security posture and ensuring compliance, AWS Config aligns with the Security pillar. Operational Excellence Pillar: AWS Config also plays a role in the continuous monitoring and refinement of operations. Knowing the state of resources, understanding changes, and being able to trace these changes over time can support operational best practices. If the primary goal is to provide traceability, monitor changes, and ensure that the operations are running according to defined standards, then AWS Config can indeed be associated with the Operational Excellence pillar.

tushmish 👍 2 Selected: B

search for AWS Config to find out its usage. https://docs.aws.amazon.com/pdfs/wellarchitected/latest/operational-excellence-pillar/wellarchitected-operational-excellence-pillar.pdf

tushmish 👍 2

Its A, Changed mind https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/security.html Maintain traceability: Monitor, alert, and audit actions and changes to your environment in real time. Integrate log and metric collection with systems to automatically investigate and take action.

jekum 👍 1 Selected: A

A is correct.

Gulsah 👍 1 Selected: A

I think the key word is traceability, therefore the answer must be A.Security.

man5484 👍 1 Selected: A

Using AWS Config to record, audit, and evaluate changes to AWS resources aligns with the Security pillar of the AWS Well-Architected Framework. The Security pillar focuses on protecting information, systems, and assets while maintaining data confidentiality, integrity, and availability. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources over time. It records changes to resource configurations and provides a detailed view of how the configurations are aligned with best practices and desired configurations. By using AWS Config, you can track and maintain traceability of changes to your resources, helping to enforce security controls, detect unauthorized changes, and ensure compliance with security requirements.

khanda 👍 2 Selected: B

Read through https://aws.amazon.com/config/

ESAJRR 👍 1 Selected: A

A. Security

Warsame21 👍 1 Selected: A

B. Network ACL

Ron_Mistah 👍 1

maybe pasted incorrectly, this is the answer for question #100 :)

Warsame21 👍 2 Selected: B

B. Operational excellence

rachmatthidayat 👍 3 Selected: B

It's B. Operational Excellence . If you refer to the AWS_Well_Architected_Framework.pdf its under Security section, when take a closer look and you will find its talking about one of the seven design principles for security in the cloud, not specifically in the context of the questions. The question is specifically mentioning "AWS Config" at the first sentence, take a walk to the AWS Config main page and you will find some of the related use cases is related with the Operations activities: like continually assess, monitor, and record resource configuration changes to simplify change management and to simplify operational troubleshooting by correlating configuration changes to particular events in your account. Reference: https://aws.amazon.com/config/

wuuuu 👍 1

In chatgpt, the answer is B. Which is the correct answer, A or B?

bugalter 👍 1 Selected: A

A. Security

Saif93 👍 2 Selected: A

A is the answer. https://aws.amazon.com/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/

BloodyMery 👍 1

it should be B cause it is not talking about finding security holes. AWS Config is here doing as a monitoring/change traceability tool, so it fits better in Operational Excellence pillar. https://docs.aws.amazon.com/pdfs/wellarchitected/latest/operational-excellence-pillar/wellarchitected-operational-excellence-pillar.pdf

Istiaque 👍 1

Answer is A

sumanshu 👍 1

Vote for A

bilel500 👍 1 Selected: A

Answer is A.

BillyC 👍 2

A is correct

Joggy12 👍 4

A: to enable traceability, "here are seven design principles for security in the cloud: Implement a strong identity foundation Enable traceability Apply security at all layers Automate security best practices Protect data in transit and at rest Keep people away from data Prepare for security events"

bipuljaishwal 👍 4

A is correct. See https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/wellarchitected-security-pillar.pdf

aboeyunus 👍 3

In the Well Architected Framework Security: ------> Enable traceability - Integrate logs and metrics with systems to automatically respond and take action So A is correct!

ThePunisher77 👍 2

A is correct. Keyword is traceability.

JohnO1971 👍 27

From the Security section of https://d1.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf " • Enable traceability: Monitor, alert, and audit actions and changes to your environment in real time. Integrate log and metric collection with systems to automatically investigate and take action."

Vita_Rasta84444 👍 3

I think it is Operational Excellence, B. Anticipate failures and trace it, using AWS Config.

PSL95 👍 8

A is correct.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Expert Analysis

Why the Answer Is Correct

The@The Security pillar of the AWS9AWS Well-Architected Framework explicitly lists "(Enable traceability" as one of its seven design principlesCprinciples.) This principle involvesAinvolves=monitoring, alerting, and auditing actions and changes to your environment in real time, which directly matches the use of AWS+AWS Config described in the questionDquestion.

Why the Other Options Are Wrong

%Wrong Operational<Operational_Excelence focuses on running and monitoring systems to deliver business value and improving%6improving supporting procedures. While AWS Config is used for operational awareness, the specific phrase "enable traceability" is a Security design principle. Performance(Performance efficiency focuses on using computing resources efficientlyCefficient'efficiently, and Cost optimization>Cost optimization focuses on avoiding un8unneeded costs,2costs, neither of which relates to traceability.

Community Comment Notes

Commenters$Commenters overwhelmingly7overwhelmingly point( point out thatDCout that "(Enable traceability" is a Security design principle, as JohnO1971 noted5JohnEJohnO1971 noted by quoting the framework*framework: "Enable traceability: Monitor, alert, and audit actions and changes". Joggy12 also36JB,Joggy12 also listed the seven security design principlesDprinciples, confirming traceability's placement. Some users like rGlike rachmatthidayat incorrectly argued for Operational Excellence by focusing on the AWS Config service$>3AWS Config service itself rather than the "enable traceability" keyword.

Exam Strategy

Pay close attention to specific keywords like "traceability" in exam questions, as they often map directly to a specific Well-Architected Framework design principle. Match the stated purpose in the prompt rather than just associating the service with a pillar based on general usage.

Related Analysis

Practice All CLF-C02 Questions

Access 120 questions with complete answers and detailed explanations.

View Full CLF-C02 Practice Test →

← Back to CLF-C02 Study Guide