SAP-C02 · Question #256
A company is running an application in the AWS Cloud. The company's security team must approve the creation of all new IAM users. When a new IAM user is created, all access for the user must be remove
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #256. The question stem and answer options stay visible for context.
Question
A company is running an application in the AWS Cloud. The company's security team must approve the creation of all new IAM users. When a new IAM user is created, all access for the user must be removed automatically. The security team must then receive a notification to approve the user. The company has a multi-Region AWS CloudTrail trail In the AWS account. Which combination of steps will meet these requirements? (Choose three.)
Options
- ACreate an Amazon EventBridge (Amazon CloudWatch Events) rule.
- BConfigure CloudTrail to send a notification for the CreateUser event to an Amazon Simple
- CInvoke a container that runs in Amazon Elastic Container Service (Amazon ECS) with AWS
- DInvoke an AWS Step Functions state machine to remove access.
- EUse Amazon Simple Notification Service (Amazon SNS) to notify the security team.
- FUse Amazon Pinpoint to notify the security team.
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.