Amazon
DOP-C02 · Question #204
A company needs to ensure that flow logs remain configured for all existing and new VPCs in its AWS account. The company uses an AWS CloudFormation stack to manage its VPCs. The company needs a soluti
The correct answer is C. Turn on AWS Config. Create an AWS Config rule to check whether VPC flow logs are turned on.. https://aws.amazon.com/blogs/mt/how-to-enable-vpc-flow-logs-automatically-using-aws-config-
Submitted by takeshi77· Mar 6, 2026Security and Compliance
Question
A company needs to ensure that flow logs remain configured for all existing and new VPCs in its AWS account. The company uses an AWS CloudFormation stack to manage its VPCs. The company needs a solution that will work for any VPCs that any IAM user creates. Which solution will meet these requirements?
Options
- AAdd the AWS::EC2::FlowLog resource to the CloudFormation stack that creates the VPCs.
- BCreate an organization in AWS Organizations. Add the company's AWS account to the
- CTurn on AWS Config. Create an AWS Config rule to check whether VPC flow logs are turned on.
- DCreate an IAM policy to deny the use of API calls for VPC flow logs. Attach the IAM policy to all
How the community answered
(51 responses)- A4% (2)
- B2% (1)
- C82% (42)
- D12% (6)
Explanation
https://aws.amazon.com/blogs/mt/how-to-enable-vpc-flow-logs-automatically-using-aws-config-
Topics
#VPC Flow Logs#AWS Config#compliance monitoring#network security
Community Discussion
No community discussion yet for this question.