Question

A healthcare company runs regulated workloads in an Assured Workloads folder configured for a specific compliance regime. The compliance team needs an automated way to be alerted when a resource is created or modified in a way that violates the Assured Workloads controls (for example, a resource deployed outside the approved region), so they can document and remediate the drift. Which capability should they use?

Accepted Answer

Enable Assured Workloads monitoring, which surfaces compliance violations (such as resource location or configuration drift) in the console and can generate findings for review and remediation

Answer

Rely on Access Transparency logs to detect when resources drift from the approved compliance configuration

Answer

Configure a Cloud DLP inspection job to scan resources and flag those that violate the compliance regime

Answer

Use Cloud Billing budget alerts to detect resources deployed outside approved regions