DOP-C02 · Question #107
A company uses a single AWS account to test applications on Amazon EC2 instances. The company has turned on AWS Config in the AWS account and has activated the restricted-ssh AWS Config managed…
The correct answer is A. Create an Amazon EventBridge rule that matches an AWS Config evaluation result of. The Amazon EventBridge rule should be set up to match AWS Config evaluation results specifically for the restricted-ssh rule. An input transformer should be configured for the EventBridge rule to extract and format the required information (e.g., name and ID of the noncompliant…
Question
A company uses a single AWS account to test applications on Amazon EC2 instances. The company has turned on AWS Config in the AWS account and has activated the restricted-ssh AWS Config managed rule. The company needs an automated monitoring solution that will provide a customized notification in real time if any security group in the account is not compliant with the restricted-ssh rule. The customized notification must contain the name and ID of the noncompliant security group. A DevOps engineer creates an Amazon Simple Notification Service (Amazon SNS) topic in the account and subscribes the appropriate personnel to the topic. What should the DevOps engineer do next to meet these requirements?
Options
- ACreate an Amazon EventBridge rule that matches an AWS Config evaluation result of
- BConfigure AWS Config to send all evaluation results for the restricted-ssh rule to the SNS topic.
- CCreate an Amazon EventBridge rule that matches an AWS Config evaluation result of
- DCreate an Amazon EventBridge rule that matches all AWS Config evaluation results of
How the community answered
(27 responses)- A74% (20)
- B15% (4)
- C7% (2)
- D4% (1)
Explanation
The Amazon EventBridge rule should be set up to match AWS Config evaluation results specifically for the restricted-ssh rule. An input transformer should be configured for the EventBridge rule to extract and format the required information (e.g., name and ID of the noncompliant security group) from the AWS Config evaluation result. The EventBridge rule should be configured to publish a notification to the SNS topic once it detects a noncompliant result.
Topics
Community Discussion
No community discussion yet for this question.