DOP-C02 · Question #208
A company uses an organization in AWS Organizations to manage several AWS accounts that the company's developers use. The company requires all data to be encrypted in transit. Multiple Amazon S3…
The correct answer is C. Turn on AWS Config for the organization. Deploy a conformance pack that uses the s3-bucket-. https://repost.aws/knowledge-center/s3-bucket-policy-for-config-rule
Question
A company uses an organization in AWS Organizations to manage several AWS accounts that the company's developers use. The company requires all data to be encrypted in transit. Multiple Amazon S3 buckets that were created in developer accounts allow unencrypted connections. A DevOps engineer must enforce encryption of data in transit for all existing S3 buckets that are created in accounts in the organization. Which solution will meet these requirements?
Options
- AUse AWS CloudFormation StackSets to deploy an AWS Network Firewall firewall to each
- BUse AWS CloudFormation StackSets to deploy an AWS Network Firewall firewall to each
- CTurn on AWS Config for the organization. Deploy a conformance pack that uses the s3-bucket-
- DTurn on AWS Config for the organization. Deploy a conformance pack that uses the s3-bucket-
How the community answered
(25 responses)- A24% (6)
- B8% (2)
- C56% (14)
- D12% (3)
Explanation
https://repost.aws/knowledge-center/s3-bucket-policy-for-config-rule
Topics
Community Discussion
No community discussion yet for this question.