What permissions must be granted to successfully register an AWS cloud account with Falcon Cloud Security?

Question

Options

• APermissions to launch new EC2 instances within the account.
• BPermissions to manage identity and access management (IAM) users and roles.
• CPermissions to read and monitor cloud resources using a role with the required API policies.
• DPermissions to delete unused resources within the account for optimization purposes.

• A
  2% (1)
• B
  6% (3)
• C
  90% (45)
• D
  2% (1)

Explanation

Option A: Permissions to launch EC2 instances are unnecessary for Falcon Cloud Security registration. The integration focuses on monitoring and assessment, not workload creation. Option B: Falcon Cloud Security does not require permissions to manage IAM users or roles. IAM management is outside the scope of its monitoring responsibilities. Option C: To register an AWS account with Falcon, a role with read and monitor permissions via required API policies (such as CloudWatch: Describe* or ec2: DescribeInstances) must be granted. These permissions enable Falcon to gather data about cloud resources for security Option D: Falcon Cloud Security does not need or request permissions to delete resources in the Its role is to monitor and assess, not manage resource lifecycle operations.

No community discussion yet for this question.