For an AWS account already connected to Defender for Cloud, how should you enable AWS Foundational Security Best Practices while minimizing administrative effort?

Assigning a built-in compliance standard is the most efficient way to enable AWS Foundational Security Best Practices. Defender for Cloud includes pre-defined compliance standards that map to common security benchmarks, including AWS Foundational Security Best Practices. By assigning this standard, Defender for Cloud automatically monitors your AWS resources against these best practices, generating recommendations and alerts without requiring manual configuration. Creating a new custom standard or assessment would involve significant manual effort to define all the rules and checks, which is unnecessary when a built-in option exists. Assigning a built-in assessment is incorrect because assessments are components of standards; you assign the standard itself to enable the full set of best practices.