When integrating an AWS cloud account with CrowdStrike Falcon, which of the following permissions must the dedicated IAM role include?

Question

Options

• AWrite access to modify security groups and IAM roles in the AWS account.
• BFull administrative access to the AWS account to manage all resources.
• CPermissions to read EC2 metadata, CloudTrail logs, and list S3 buckets.
• DAccess to create new virtual machines for deploying the Falcon agent.

• A
  7% (2)
• B
  3% (1)
• C
  87% (26)
• D
  3% (1)

Explanation

Option A: Write access to modify security groups and IAM roles is not required for integration. The integration focuses on monitoring, not modifying, cloud resources. Option B: Full administrative access is overly broad and unnecessary for CrowdStrike integration. The least-privilege principle is used to ensure security. Option C: To integrate an AWS account with CrowdStrike Falcon, the IAM role must have specific read-only permissions to access EC2 metadata, CloudTrail logs, and other necessary resources like S3 bucket configurations. These permissions allow the Falcon platform to monitor and assess the security posture without altering the resources. Option D: CrowdStrike Falcon does not need to create virtual machines for deploying agents as part of cloud account registration. Agents are deployed separately on managed resources.

No community discussion yet for this question.