You just joined a company as a security specialist. Your company uses varieties of AWS services to host its applications.
You want to quickly understand if the existing underlying AWS Infrastructure meets the security compliance regulations of the company.
You also need to continuously monitor and measure configuration changes for new and existing resources running on AWS.
Which options can help you to achieve the requirements? (SELECT TWO.)

Answer options:

A.Download the compliance documents from AWS Artifact to prove that the underlying AWS infrastructure is compliant with safety regulations.
B.Create AWS Config custom rules using Lambda functions to continuously monitor the AWS environment and trigger alerts if certain rules are not compliant as per the configuration requirements of the organization.
C.Create a Lambda function to get the security data in Trusted Advisor periodically. Trigger an SNS notification if a security problem is detected.
D.Divide AWS resources into different categories of products. Manage all products in AWS Service Catalog and measure if there are any security issues.

Answer : A and B
Option A is CORRECT because AWS Artifact is a portal that provides an enterprise with access to security and compliance reports that apply to the underlying Infrastructure running on AWS public cloud. This satisfies the first expectation of the question.
Option B is CORRECT because, with AWS Config rules, customers can control how they use AWS resources. They can create desired configuration rules to evaluate if AWS resources comply with them.
Option C is incorrect because the AWS Trusted Advisor inspects your AWS environment and makes recommendations for saving money, improving system performance, or closing security gaps, but it does not help to provide compliance reports or monitor any configuration changes on the AWS environment.
Option D is incorrect because AWS Service Catalog enables organizations to create and manage catalogs of IT services that are approved for use on AWS, but it does not help to provide compliance reports or monitor any configuration changes on the AWS environment.
Reference:
https://aws.amazon.com/artifact/
https://aws.amazon.com/config/