AWS Certified Advanced Networking – Specialty ANS-C00 – Question126 | AWS Certified Advanced Networking

You can use the ____ command of the AWS Config service CLI to see the compliance state of each of your rules.

A. get-compliance-details-by-resource
B. describe-compliance-by-config-rule
C. get-compliance-details-by-config-rule
D. describe-compliance-by-resource

Correct Answer: B

Explanation:

Explanation:
You can use the describe-compliance-by-config-rule command of the AWS Config CLI to see the compliance state of each of your rules. For each rule that has a compliance type of NON_COMPLIANT,
AWS Config returns the number of noncompliant resources for the CappedCount parameter.
Reference: http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html