SCS-C02 · Question #230
A company has an application on Amazon EC2 instances that store confidential customer data. The company must restrict access to customer data. A security engineer requires secure access to the instanc
The correct answer is D. Use AWS Systems Manager Session Manager to connect to the EC2 instances. Configure. AWS Systems Manager Session Manager provides secure and auditable access to EC2 instances without the need to open inbound ports, manage SSH keys, or maintain bastion hosts. It supports logging session activity to Amazon CloudWatch Logs or Amazon S3, and you can configure the log
Question
A company has an application on Amazon EC2 instances that store confidential customer data. The company must restrict access to customer data. A security engineer requires secure access to the instances that host the application. According to company policy, users must not open any inbound ports, maintain bastion hosts, or manage SSH keys for the EC2 instances. The security engineer wants lo monitor, store, and access all session activity logs. The logs must be encrypted. Which solution will meet these requirements?
Options
- AUse AWS Control Tower to connect to the EC2 instances. Configure Amazon CloudWatch
- BUse AWS Security Hub to connect to the EC2 instances. Configure Amazon CloudWatch logging
- CUse AWS Systems Manager Session Manager to connect to the EC2 instances. Configure
- DUse AWS Systems Manager Session Manager to connect to the EC2 instances. Configure
How the community answered
(21 responses)- A5% (1)
- B5% (1)
- C10% (2)
- D81% (17)
Explanation
AWS Systems Manager Session Manager provides secure and auditable access to EC2 instances without the need to open inbound ports, manage SSH keys, or maintain bastion hosts. It supports logging session activity to Amazon CloudWatch Logs or Amazon S3, and you can configure the logs to be encrypted. This meets the requirement of monitoring, storing, and encrypting session activity logs while adhering to the company's security policy.
Topics
Community Discussion
No community discussion yet for this question.