diff --git a/knowledge base/cloud computing/aws/README.md b/knowledge base/cloud computing/aws/README.md
index 3ce6802..47c70a1 100644
--- a/knowledge base/cloud computing/aws/README.md
+++ b/knowledge base/cloud computing/aws/README.md
@@ -198,20 +198,23 @@ Compliance service for assessing and auditing AWS resources.
Provides an inventory of resources.
Records and monitors resource configurations and their changes.
-The data is stored in a bucket (default name `config-bucket-{aws-account-number}`)
-Changes can be streamed to 1 SNS topic for notification purposes.
+Allows for automatic remediation for non-compliant resources by leveraging Systems Manager Automation documents.
+
+The service's data is stored in an S3 bucket.
+The bucket is named `config-bucket-{aws-account-number}` by default and created upon service's activation.
+
+The changes logs can be streamed to 1! SNS topic for notification purposes.
+
Uses _rules_ to evaluate whether the resources configurations comply.
-Rule evaluation is done once every time a configuration changes, or periodically.
+Rule evaluation is done either **once** every time a configuration changes, or **periodically**.
Resources are marked with the evaluation result (_compliant_, _non-compliant_).
Custom rules can be used to evaluate for uncommon requirements.
Custom rules leverage lambda functions.
-Allows for automatic remediation for non-compliant resources by leveraging Systems Manager Automation documents.
-
-_Conformance packs_ are set of rules bundled together as a deployable single entity.
+_Conformance packs_ are set of rules bundled together as a deployable, single, immutable entity.
Defined as YAML templates.
-Immutable: users cannot make changes without updating the whole rule package.
+Users cannot make changes without updating the **whole** rule package.
Sample templates for compliance standards and benchmarks are available.
### Detective