What You'll Be Tested On
- Implement preventive controls with SCPs and permission boundaries
- Design detective controls with Config rules and Security Hub standards
- Automate compliance remediation with Config and SSM Automation
- Implement multi-account security baseline with Control Tower
- Design security governance for new account provisioning
Key AWS Services in This Domain
Exam Tips for Domain 6
Know the difference between preventive (SCPs) and detective (Config) controls
Understand Security Hub standards and how to customize them
Practice designing a security baseline for new accounts
Practice Domain 6 Questions
Test your knowledge of Management & Security Governance with practice questions from our SCS-C02 question bank.
Start Practice Quiz →