What is AWS trusted Advisor? - Answers A fully managed best-practice auditing tool. Looks in five areas.
Cost Optimization, Performance, Security, Fault Tolerance, and service limits. Automate a response.
Free. Doesn't fix problem. Use with event bridge.
What is AWS Control Tower? - Answers Easy way to set up and govern an AWS multi-account
environment. Automates account creation and security controls via other AWS services. Extends AWS
Organizations to prevent governance drift and leverages different guardrails. User can provision new
AWS account quickly, using central admin established compliance policies
What is a landing zone? - Answers Well-architected, muti-account environment based on compliance
and security best practices.
What are Guardrails? - Answers High-Level rules in plain language providing governance. Preventative
and Detective. Preventative is supported in all regions and leverages service control policies(SCPs),
Statuses of enforced or not enables. Detective only applies to certain regions, leverages AWS Config
rules, statuses of clear, in violation, or not enabled
What is Account Factory? - Answers Configurable account template for standardizing pre-approved
configs of new accounts.
What is a CloudFormation StackSet? - Answers Automated deployments of templates deploying
repeated resources for governance
What are the shared accounts in reguards to AWS Control Tower? - Answers Three accounts used by
control tower created during landing zone creation. Management account, Archive account, and Audit
account
What is the AWS License manager? - Answers AWS service which makes license management simpler
and more efficient with different vendors (Microsoft, Oracle, etc..)
What is AWS Health? - Answers Gain visibility of resource performance and availability. Look out for
questions about checking alerts for service health and automating the reboot of EC2 instances for AWS
maintenance. Automate actions based on events using Amazon EventBridge
What is AWS service Catalog and AWS Proton? - Answers A services which allows organizations to create
and manage catalogs of approved IT services. Benefits - Standardize, self-service, access Control,
Versioning. Proton offer IaC provisioning and deployment of serverless/container architecture
What are the Six Pillars of AWS Well-Architected Framework Review - Answers Operational Excellence
Reliability
Security
Performance Efficiency