Exam C1000-142 Topic 1 Question 179 Discussion

By using the IBM Cloud Security and Compliance Center, you can significantly decrease the likelihood of a misconfiguration-related security issue by setting guardrails around the way that your resources can be configured. With the Configuration Governance component of the Security and Compliance Center, you are able to define rules and templates that can help to standardize your organizations resource configuration. When you create a rule and enable enforcement, you can apply it to your entire enterprise, account, or a subset of your resources by limiting your scope to a resource group. Then, when a rule is in place, a user in your account is unable to provision a resource or set a configuration that violates the rule. In some situations, resource configurations require multiple API calls to set. In these cases, you must also define a template in order for the resource to be configured. With templates, you can define your preferred values, or customized defaults, on properties that are used to configure an IBM Cloud resource. By creating templates that users in your accounts can regularly review and reference, you set guidelines for teams to follow. After you attach a template to a scope, your customized defaults are applied by target services to ensure that your selections override the IBM-defined values each time that a target resource is created.