A company runs several AWS accounts, and nobody reviews them on a regular basis.
It wants AWS to check the accounts automatically against best practices and recommend ways to save money, close security gaps or improve availability, without installing any tools.
Which AWS service provides these checks?
Choose one answer.
AA. AWS Trusted Advisor, which checks accounts against best practices and recommends fixes
BB. AWS Config, which records resource configurations and evaluates them against rules
CC. AWS Cost Explorer, which charts past spending and forecasts future costs by service and account
DD. AWS Artifact, which provides on-demand compliance reports and agreements with AWS
Show the answer and explanation
Answer: A
A. Right: Correct. Trusted Advisor inspects the AWS environment and makes recommendations when there are opportunities to save money, improve availability and performance, or close security gaps. Learn more: AWS Trusted Advisor (opens in a new tab)
B. Wrong: AWS Config records resource configurations and evaluates them against rules, but the company must choose and maintain those rules. It does not produce a set of best-practice recommendations across savings, security and availability.
C. Wrong: Cost Explorer charts past spending and forecasts future costs. It helps with spend analysis only, and does not check security or availability settings.
D. Wrong: AWS Artifact gives access to AWS compliance reports and agreements. It does not inspect the company's own accounts or make recommendations about them.
Explanation
AWS Trusted Advisor inspects a customer's AWS environment against AWS best practices and recommends ways to save money, improve availability and performance, or close security gaps. Config, Cost Explorer and Artifact each cover a narrower part of that job.
Want more on Well-Architected Framework? The 5 full-length practice sets have 22 more Well-Architected Framework questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets →