An e-commerce company stores inventory, order, and user information in multiple Amazon Redshift clusters. The Redshift clusters must comply with the company's security policies. The company must…

Question

Options

• ACreate an Amazon EventBridge rule that uses the Redshift clusters as the source. Create an
• BCreate an AWS Lambda function to check the validity of the Redshift cluster security
• CSet up Amazon Redshift Advisor in the company's AWS account to monitor cluster configurations.
• DCreate an AWS Lambda function to check the Redshift clusters for any violation of the security

• A
  6% (3)
• B
  12% (6)
• C
  4% (2)
• D
  78% (38)

Explanation

The company needsautomatic monitoringandnotificationsforsecurity violationsin Amazon Redshift Create an Amazon EventBridge rule that uses the Redshift clusters as the source. Create an AWS Lambda function to evaluate the Redshift cluster security configuration. Configure the Lambda function to notify the company of any violations of the security policies. Add the Lambda function as a target of the EventBridge rule. EventBridgecan trigger actionsbased on events. However, itdoes not track changesin Redshift security configurations. Why not? AWS Configis bettersuited forcompliance monitoring. Create an AWS Lambda function to check the validity of the Redshift cluster security configurations. Create an Amazon EventBridge rule that invokes the Lambda function when Redshift clusters are created. Notify the company of any violations of security policies. This solution only checks security at cluster creation. Itdoes not detect changesthat happenafter the cluster is created. Why not? Security policiesneed continuous monitoring. Set up Amazon Redshift Advisor in the company's AWS account to monitor cluster configurations. Configure Redshift Advisor to generate notifications for security items that the company must address. Redshift Advisorprovides performance tuning recommendationsbutdoes not monitor security Why not? Itdoes not provide compliance checks. Create an AWS Lambda function to check the Redshift clusters for any violation of the security configurations. Create an AWS Config custom rule to invoke the Lambda function when Redshift cluster security configurations are modified. Provide the compliance state of each Redshift cluster to AWS Config. Configure AWS Config to notify the company of any violations of the security AWS Configtracksconfiguration changesin Redshift clusters. Custom AWS Config rulesallowsecurity compliance enforcement. Lambdacan performcustom security checksand notify the company. Why is this best? AWS Config isdesigned for compliance monitoring.

No community discussion yet for this question.