SAP-C02 · Question #74
A company wants to deploy an AWS WAF solution to manage AWS WAF rules across multiple AWS accounts. The accounts are managed under different OUs in AWS Organizations. Administrators must be able to…
The correct answer is A. Use AWS Firewall Manager to manage AWS WAF rules across accounts in the organization. Use. In this solution, AWS Firewall Manager is used to manage AWS WAF rules across accounts in the organization. An AWS Systems Manager Parameter Store parameter is used to store account numbers and OUs to manage. This parameter can be updated as needed to add or remove accounts or…
Question
A company wants to deploy an AWS WAF solution to manage AWS WAF rules across multiple AWS accounts. The accounts are managed under different OUs in AWS Organizations. Administrators must be able to add or remove accounts or OUs from managed AWS WAF rule sets as needed. Administrators also must have the ability to automatically update and remediate noncompliant AWS WAF rules in all accounts. Which solution meets these requirements with the LEAST amount of operational overhead?
Options
- AUse AWS Firewall Manager to manage AWS WAF rules across accounts in the organization. Use
- BDeploy an organization-wide AWS Conng rule that requires all resources in the selected OUs to
- CCreate AWS WAF rules in the management account of the organization. Use AWS Lambda
- DUse AWS Control Tower to manage AWS WAF rules across accounts in the organization. Use
How the community answered
(27 responses)- A56% (15)
- B7% (2)
- C26% (7)
- D11% (3)
Explanation
In this solution, AWS Firewall Manager is used to manage AWS WAF rules across accounts in the organization. An AWS Systems Manager Parameter Store parameter is used to store account numbers and OUs to manage. This parameter can be updated as needed to add or remove accounts or OUs. An Amazon EventBridge rule is used to identify any changes to the parameter and to invoke an AWS Lambda function to update the security policy in the Firewall Manager administrative account. This solution allows for easy management of AWS WAF rules across multiple accounts with minimal operational overhead. https://aws.amazon.com/solutions/implementations/automations-for-aws-firewall-manager/
Community Discussion
No community discussion yet for this question.