A city is standing up a new AWS Organizations OU for digital services. Security wants threat detection and a consolidated security findings view before any workload account goes live. What should be enabled in the baseline?
Select an answer to reveal the explanation.
Short Explanation
Turn on GuardDuty and Security Hub before the first workload moves in—like smoke detectors before tenants arrive. Waiting for a breach to "justify" detection is decorating after the fire.
Full Explanation
Managed security baselines for new solutions should include GuardDuty for intelligent threat detection and Security Hub for aggregated findings and standards posture, enabled before workloads launch. Deferring detection, substituting billing tools for security monitoring, or disabling organization trails weakens the launch security baseline.