DOP-C02 · Question #243
DOP-C02 Question #243: Real Exam Question with Answer & Explanation
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #243. The question stem and answer options stay visible for context.
Question
A DevOps team has created a Custom Lambda rule in AWS Config. The rule monitors Amazon Elastic Container Repository (Amazon ECR) policy statements for ecr:* actions. When a noncompliant repository is detected, Amazon EventBridge uses Amazon Simple Notification Service (Amazon SNS) to route the notification to a security team. When the custom AWS Config rule is evaluated, the AWS Lambda function fails to run. Which solution will resolve the issue?
Options
- AModify the Lambda function's resource policy to grant AWS Config permission to invoke the
- BModify the SNS topic policy to include configuration changes for EventBridge to publish to the
- CModify the Lambda function's execution role to include configuration changes for custom AWS
- DModify all the ECR repository policies to grant AWS Config access to the necessary ECR API
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.