SCS-C02 · Question #219
A company has public certificates that are managed by AWS Certificate Manager (ACM). The certificates are either imported certificates or managed certificates from ACM with mixed validation methods…
The correct answer is D. Create an Amazon EventBridge rule by using a predefined pattern for ACM Choose the metric in. Using Amazon EventBridge to create a rule for ACM Certificate Approaching Expiration events and configuring an SNS topic as the target provides an operationally efficient way to monitor and alert on certificate expirations. This method leverages AWS's native capabilities for…
Question
A company has public certificates that are managed by AWS Certificate Manager (ACM). The certificates are either imported certificates or managed certificates from ACM with mixed validation methods. A security engineer needs to design a monitoring solution to provide alerts by email when a certificate is approaching its expiration date. What is the MOST operationally efficient way to meet this requirement?
Options
- ACreate an AWS Lambda function to list all certificates and to go through each certificate to
- BCreate an Amazon CloudWatch alarm Add all the certificate ARNs in the
- CSet up AWS Security Hub. Turn on the AWS Foundational Security Best Practices standard with
- DCreate an Amazon EventBridge rule by using a predefined pattern for ACM Choose the metric in
How the community answered
(22 responses)- A5% (1)
- B5% (1)
- C14% (3)
- D77% (17)
Explanation
Using Amazon EventBridge to create a rule for ACM Certificate Approaching Expiration events and configuring an SNS topic as the target provides an operationally efficient way to monitor and alert on certificate expirations. This method leverages AWS's native capabilities for event monitoring and notifications, reducing the need for custom implementations and ensuring timely
Topics
Community Discussion
No community discussion yet for this question.