Compliance and governance

Governance is proving and enforcing that an account meets the rules. AWS inherits its own certifications, hands you the reports through Artifact, records every API call with CloudTrail, and tracks resource configuration over time with Config. Together they answer who did what and whether it is still compliant.