Compliance, Governance and Privacy
Cloud Practitioner compliance items test AWS compliance programs, Artifact, Audit Manager, Config, organizations, privacy, data residency, and governance tools.
How to study for AWS Cloud Practitioner
Treat each question as a service-selection or responsibility decision: identify the business need, AWS responsibility, customer configuration, and best-fit service.
Core concepts
Concept 1
AWS compliance programs and reports help customers understand AWS control environment and inherit eligible controls.
Exam cue: Use Artifact for AWS compliance reports and agreements.
Concept 2
Customers remain responsible for meeting their own compliance, data residency, retention, and privacy obligations.
Exam cue: Use Config for resource configuration history and rule evaluation.
Concept 3
Governance tools help monitor configuration, accounts, policies, resources, and evidence.
Exam cue: Separate AWS compliance evidence from customer compliance responsibility.
Risk pitfalls and guardrails
Assuming an AWS compliance program automatically makes the customer compliant.
Guardrail: Avoid answers that ignore customer configuration, choose unmanaged services when managed services fit, or use billing reports when proactive alerts are required.
Ignoring data residency requirements when selecting Regions.
Guardrail: Avoid answers that ignore customer configuration, choose unmanaged services when managed services fit, or use billing reports when proactive alerts are required.
Skipping governance because resources are created quickly.
Guardrail: Avoid answers that ignore customer configuration, choose unmanaged services when managed services fit, or use billing reports when proactive alerts are required.
Memory anchors
AWS Artifact
AWS Artifact provides access to AWS compliance reports and select agreements.
AWS Config
AWS Config records resource configuration and evaluates rules.
Audit Manager
AWS Audit Manager helps collect evidence for audits against frameworks.
Organizations
AWS Organizations centrally manages multiple AWS accounts.
SCP
A service control policy sets maximum available permissions across accounts in AWS Organizations.
Data Residency
Data residency concerns where data is stored and processed geographically.
Compliance Report
A compliance report documents controls, audits, or certifications for review.
Privacy
Privacy governs collection, use, disclosure, retention, and protection of personal data.
Retention
Retention defines how long data should be kept before deletion or archival.
Governance Control
A governance control directs or monitors resource use according to policy.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
An auditor asks for AWS's current SOC report covering controls for the underlying cloud infrastructure. Which service should the customer use to obtain it?
A company wants to automate the collection of evidence from its AWS environment for recurring control assessments. Which service is designed for this?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 317 U.S. exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”