Compliance and Audit Evidence

Proving it: Config rules with automatic remediation and aggregated compliance, Audit Manager assessments and automated evidence collection, Artifact for AWS’s own reports, and the Well-Architected Tool, Trusted Advisor and Security Hub as three different instruments for measuring an architecture.

Content current as of 2026-10.

Lessons

1. Config rules and remediation
2. Collecting audit evidence
3. Reviewing architecture against best practice

Sources

• SCS-C03 exam guide — Content Domain 6 (tasks 6.1–6.3)
• AWS Config — remediating noncompliant resources
• AWS Audit Manager user guide — concepts and evidence
• AWS Artifact user guide
• AWS Well-Architected Tool user guide