SAA-C03 Q47 · Monitoring

Question

A company runs production workloads in its AWS account. Multiple teams create and maintain the workloads. The company needs to be able to detect changes in resource configurations. The company needs to capture changes as configuration items without changing or modifying the existing resources. Which solution will meet these requirements?

Accepted Answer

**AWS Config** is purpose-built for exactly this use case. Here's how it satisfies every requirement:

1. **Detect changes in resource configurations**: AWS Config continuously monitors and records your AWS resource configurations. When a change occurs (e.g., a security group rule is modified, an S3 bucket policy changes), Config detects it automatically.

2. **Capture changes as configuration items**: This is a key phrase in the question. A **configuration item (CI)** is a specific AWS Config concept — it's a point-in-time snapshot of a resource's attributes (metadata, relationships, current configuration, related events). Every time a resource changes, Config creates a new configuration item.

3. **Without changing or modifying existing resources**: AWS Config is a **read-only monitoring

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips