ANS-C01 · Question #296
A company operates in multiple AWS Regions. The company has deployed transit gateways in each Region. The company uses AWS Organizations to operate multiple AWS accounts in one organization. The…
The correct answer is B. Create a custom AWS Config rule with automatic remediation that verifies VPC Flow Logs is. This solution uses AWS Config, which allows you to automatically monitor and evaluate the configuration of AWS resources, including VPCs. By creating a custom AWS Config rule that checks whether VPC Flow Logs are enabled and correctly configured, you can ensure that VPC flow…
Question
A company operates in multiple AWS Regions. The company has deployed transit gateways in each Region. The company uses AWS Organizations to operate multiple AWS accounts in one organization. The company needs to capture all VPC flow log data when a new VPC is created. The company needs to send flow logs to a specific Amazon S3 bucket. Which solution will meet these requirements with the LEAST administrative effort?
Options
- AUpdate IAM permissions for each user to include a condition that ensures users can create VPCs
- BCreate a custom AWS Config rule with automatic remediation that verifies VPC Flow Logs is
- CEnable VPC Flow Logs on each transit gateway. Configure VPC Flow Logs to send flow logs to the
- DDeploy a serverless application that uses AWS CloudTrail to monitor for VPC creation events in
How the community answered
(26 responses)- A8% (2)
- B58% (15)
- C12% (3)
- D23% (6)
Explanation
This solution uses AWS Config, which allows you to automatically monitor and evaluate the configuration of AWS resources, including VPCs. By creating a custom AWS Config rule that checks whether VPC Flow Logs are enabled and correctly configured, you can ensure that VPC flow logs are captured for every new VPC. With automatic remediation, the rule can also ensure the VPC Flow Logs configuration is applied if not already set. Additionally, applying this rule to your entire organization will simplify the management process and reduce administrative effort.
Community Discussion
No community discussion yet for this question.