Design a Compliance and Audit Monitoring Solution — System Design Interview Practice
Design a compliance monitoring system that tracks configuration changes, detects security threats, ensures regulatory compliance, and provides centralized audit logging. Work through the requirements, architecture trade-offs, and an interactive design review.
Requirements and concepts to consider
- Track all resource configuration changesRequirement
- Audit API calls and user activityRequirement
- Detect security threatsRequirement
- Ensure compliance with standardsRequirement
- Generate compliance reportsRequirement
- Remediate non-compliant resourcesRequirement
- Alert on security findingsRequirement
- Maintain audit logs for 7 yearsRequirement
- awsConcept to explore
- complianceConcept to explore
- securityConcept to explore
- cloudtrailConcept to explore
- configConcept to explore
- guarddutyConcept to explore