A company needs to improve its ability to identify and prevent IAM policies that grant public access or cross-account access to resources. The company has implemented AWS Organizations and has started using AWS Identity and Access Management Access Analyzer to refine overly broad access to accounts in the organization. A security engineer must automate a response in the company's organization for any newly created policies that are overly permissive. The automation must remediate external access and must notify the company's security team. Which combination of steps should the security engineer take to meet these requirements? (Choose three.)

Question

Accepted Answer

A. Create an AWS Step Functions state machine that checks the resource type in the finding and C. In Amazon EventBridge, create an event rule that matches active IAM Access Analyzer findings F. Create an Amazon Simple Notification Service (Amazon SNS) topic for external or cross-account

Answer

B. Create an AWS Batch job that forwards any resource type findings to an AWS Lambda function.

Answer

D. In Amazon CloudWatch, create a metric filter that matches active IAM Access Analyzer findings

Answer

E. Create an Amazon Simple Queue Service (Amazon SQS) queue. Configure the queue to forward

A company needs to improve its ability to identify and prevent IAM policies that grant public access or cross-account access to resources. The company has implemented AWS Organizations and has…

Question

Options

How the community answered

Explanation

Topics

Community Discussion