AWS Cloud TutorialLesson 72Free preview
AWS Governance
This lesson is part of AWS · All levels
Summary
Cloud governance means ensuring the use of resources in accordance with business policies, standards, and objectives through consistently applied controls. The AWS Control Tower provides preventive and detective guardrails, while the AWS Config Rules provide automatic verification. Good governance balances the freedom of teams to innovate with security and cost control.
Key points
- Governance = policy + control + continuous verification
- Preventive guardrails prevent, detective guardrails detect violations
- Control Tower provides ready-made guardrails for multi-account
- SCP, IAM, and Config Rules are the primary management tools
- Periodic review to keep policy relevant
Full lesson
Code examples and quizzes
Full lessons, code examples, and quizzes are available to subscribers. 5 questions.