AWS Certified Advanced Networking – Specialty ANS-C00 – Question120

Non-compliant resources identified through the use of AWS Config Rules are automatically removed from operational service.

A.
It depends on the Rule configuration
B. Only if it remains non-compliant for more than 6 hours
C. True
D. False

Correct Answer: D

Explanation:

Explanation:
Each time a change is made to one of your supported resources, AWS config will check its compliance against any Config Rules that you have in place. If there is a violation against these rules then AWS Config will send a message to the Configuration Stream via SNS and the resource will be marked as `noncompliant’.
It’s important to note that this does not mean the resource will be taken out of service or it will stop working.
It will continue to operate exactly as it is with its new configuration. AWS Config simply alerts you that there is a violation and it’s up to you to take the appropriate action.
Reference: http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html