A regulation requires encryption, access review, retention, and audit evidence.
Map each abstract requirement to AWS settings and accountable owners.
Which governance approach is most appropriate?
Use a control matrix that maps requirements to controls, evidence, owners, and review periods.
Detailed explanation
Document storage does not implement or verify the controls.
Document storage does not implement or verify the controls.
Encryption, retention, authorization, deletion, and review need separate controls.
Encryption, retention, authorization, deletion, and review need separate controls.
KMS, S3, Lake Formation, and CloudTrail evidence can be reviewed against the requirement.
KMS, S3, Lake Formation, and CloudTrail evidence can be reviewed against the requirement.
A logo does not prove the configuration of this environment.
A logo does not prove the configuration of this environment.
Check official documentation
Compare the following points with the official documentation.
AWS Audit Manager、AWS Config、CloudTrail、Security Hubの公式説明を確認する。
What to confirm
認定表示・CloudTrail単独と、要件を制御と証拠へ対応付ける違いを説明できる。
Key points
- Control Matrix
- AWS Audit Manager
- Evidence
- Owner
Notes
- Environment: AWS公式DEA-C01試験ガイドと各サービスの公式ドキュメントの確認
- Confirm current AWS service behavior in the official DEA-C01 documentation.
Foundation review
Evidence freshness
Ensure configuration and review evidence covers the requested audit period.
Exception
Record risk, expiry, compensating control, and approver for unmet requirements.