AWS DevOps Engineer Professional Practice Test

How can AWS Config rules be verified after deployment in multiple AWS accounts?

1. Using AWS CloudTrail logs

2. By activating AWS Config's rule evaluation status

3. By deploying additional monitoring resources

4. Through direct API calls to AWS services

The correct answer is: By activating AWS Config's rule evaluation status

Activating AWS Config's rule evaluation status is the best method to verify the status of AWS Config rules after deployment across multiple AWS accounts. This feature allows you to see whether the rules that you have set are being evaluated against the resources in your accounts and provides insights into any compliance issues. When AWS Config rules are evaluated, the results show whether the resources comply with your defined rules. You can review the evaluation results directly in the AWS Management Console for a clear understanding of rule compliance across different accounts. This ability to see rule evaluation directly helps ensure that your rules are functioning as intended and that your resources are in compliance with organizational policies. This method is specifically designed for tracking compliance and evaluating rules in AWS Config, making it the most straightforward and effective approach for verifying rule status compared to the other options provided.