A security team wants to deploy one curated collection of AWS Config rules and remediations to many accounts and Regions at once. Which Config feature provides that bundle?
Show answer and explanation
Answer: A
A conformance pack is a YAML template that packages Config rules together with optional remediation actions. It can be deployed across an organization and into multiple Regions from a single set of source files, which makes it the standard way to roll out a compliance baseline. Updating the pack updates the rules everywhere it is deployed.
Why the other options are wrong
- B. An aggregator collects and displays compliance data from multiple accounts and Regions. It does not deploy rules or remediations.
- C. The recorder captures configuration changes for resources in one account and Region. It is the data source, not a deployable bundle.
- D. A resource timeline shows the history of a single resource's configuration. It has no packaging or deployment role.
Exam tip. A deployable Config rule bundle is a conformance pack.