Instiq
Chapter 6 · Management and Security Governance·v2.0.0·Updated 6/5/2026·~8 min

What's changed: Deepened SCS-C02 Chapter 6 (added comparison tables, scenarios, FAQs, exam traps, deep-dive paragraphs to each section; localized figures to Japanese)

6.4In-scope services for management and security governance

Key points

A roundup of in-scope SCS-C03 services for management and security governance.

6.4.1In-scope services for management and security governance

For management and security governance, beyond Organizations/SCP/Control Tower/Audit Manager/Artifact, know: AWS CloudFormation (IaC), AWS Service Catalog (distribute approved resources as a catalog), AWS Well-Architected Tool (assess designs against the six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability), Amazon CodeGuru Security (detect code vulnerabilities), Amazon Q Business / Amazon Q Developer (assist business questions and coding), and Amazon SageMaker AI (build/operate ML—model security in scope).

Diagram grouping IaC/catalog/assessment (CloudFormation/Service Catalog/Well-Architected Tool), code security (CodeGuru Security), and generative AI/ML (Amazon Q Business/Q Developer/SageMaker AI).
Management/security governance services

Continue reading — free sign-up

You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.