扩大合规控制和风险评估.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.C O P 3 4 8Brian StuckerJerry PeterScaling Compliance Controls and Risk AssessmentPrincipal Securi

2、ty SAAWS WWPSSenior Product ManagerAWS Config 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Dynamically Assess Compliance“I deploy lots of resources in my environment that need to align with my compliance requirements”Automate Audit readiness“We spend a lot of time collecting ev

3、idences for audits“Data Privacy“I need to ensure access to my data aligns with my policies”Customer challenges 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Compliance and Risk Management at ScaleDetectiveControlsPreventative&ProactiveControlsConfig automated remediationSecurity

4、 Hub automated remediationConfig managed rulesConfig custom rulesSecurity Hub CSPMService control policiesResource control policiesConfig Proactive rulesRemediationAuditingConfig advanced queriesAudit Manager 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Continuous resource trac

5、king and compliance using AWS ConfigConfiguration change occurs in your AWS resourcesAWS ConfigRulesAWS ConfigHistoryAWS ConfigRecorderAWS ConfigConformance PacksCollection of Config rules that can be deployed together to evaluate all necessary rules to assess against internal and external standards

6、AWS ConfigAdvanced QueriesSearch capabilities to filter resources based on specific resource configuration,type and compliance stateAWS ConfigAggregatorsCollects configuration and compliance data across the AWS Organization of specific accounts and Regions in a single placeProvides resource discover