SEC02-AWS100.md

SEC02-AWS100 — Use a managed Config Rule

Cloud Service Provider

• Amazon Web Services

Difficulty

• Level 100 (Introductory)

Estimated Time

1 hour

Project's Author(s)

• Andrew Brown

Objectives

You need to complete the following:

• Turn on AWS Config in the US-EAST-1 region
• Choose the managed Config rule eg. encrypted-volumes
• Launch an EC2 instance without an encryped EBS volume
• Monitor AWS Config until it detects there is an EBS volume that is unencrpyted

You need to answer the following:

• What is AWS Config?
• What does an AWS Config rule do?
• What is remediation in the context of a config rule?

References

• AWS Config
• List of AWS Config Managed Rules