DOP-C02 · Question #83
A company's developers use Amazon EC2 instances as remote workstations. The company is concerned that users can create or modify EC2 security groups to allow unrestricted inbound access. A DevOps engi
The correct answer is C. Create an Amazon EventBridge event rule that has the default event bus as the source. Define. To meet the requirements, the DevOps engineer should create an Amazon EventBridge event rule that has the default event bus as the source. The rule's event pattern should match EC2 security group creation and modification events, and it should be configured to invoke the Lambda f
Question
A company's developers use Amazon EC2 instances as remote workstations. The company is concerned that users can create or modify EC2 security groups to allow unrestricted inbound access. A DevOps engineer needs to develop a solution to detect when users create unrestricted security group rules. The solution must detect changes to security group rules in near real time, remove unrestricted rules, and send email notifications to the security team. The DevOps engineer has created an AWS Lambda function that checks for security group ID from input, removes rules that grant unrestricted access, and sends notifications through Amazon Simple Notification Service (Amazon SNS). What should the DevOps engineer do next to meet the requirements?
Options
- AConfigure the Lambda function to be invoked by the SNS topic. Create an AWS CloudTrail
- BCreate an Amazon EventBridge scheduled rule to invoke the Lambda function. Define a schedule
- CCreate an Amazon EventBridge event rule that has the default event bus as the source. Define
- DCreate an Amazon EventBridge custom event bus that subscribes to events from all AWS
How the community answered
(25 responses)- A12% (3)
- B4% (1)
- C80% (20)
- D4% (1)
Explanation
To meet the requirements, the DevOps engineer should create an Amazon EventBridge event rule that has the default event bus as the source. The rule's event pattern should match EC2 security group creation and modification events, and it should be configured to invoke the Lambda function. This solution will allow for near real-time detection of security group rule changes and will trigger the Lambda function to remove any unrestricted rules and send email notifications to the security team. https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus.html
Topics
Community Discussion
No community discussion yet for this question.