SCS-C02 · Question #425
A company uses Amazon Elastic Container Registry (Amazon ECR) as the repository for its production applications. A security engineer must implement an automated solution to report any…
The correct answer is A. Activate Amazon Inspector scans for the ECR repository. Create an Amazon Simple Notification. This solution is the most operationally efficient because Amazon Inspector provides native support for enhanced scanning of Amazon ECR repositories. By using an EventBridge rule to trigger based on Amazon Inspector findings, and routing the notifications to an SNS topic…
Question
A company uses Amazon Elastic Container Registry (Amazon ECR) as the repository for its production applications. A security engineer must implement an automated solution to report any vulnerabilities that ECR enhanced scanning detects. The solution must provide notification of vulnerability findings in an instant message to the company's Slack account Which solution will meet these requirements with the MOST operational efficiency?
Options
- AActivate Amazon Inspector scans for the ECR repository. Create an Amazon Simple Notification
- BActivate Amazon Inspector scans for the ECR repository. Write a script to use AWS CLI
- CActivate Amazon Inspector scans for the ECR repository. Create an AWS Step Functions state
- DActivate AWS Security Hub scans for the ECR repository. Create a custom action in Security Hub
How the community answered
(26 responses)- A73% (19)
- B4% (1)
- C8% (2)
- D15% (4)
Explanation
This solution is the most operationally efficient because Amazon Inspector provides native support for enhanced scanning of Amazon ECR repositories. By using an EventBridge rule to trigger based on Amazon Inspector findings, and routing the notifications to an SNS topic consumed by AWS Chatbot (which is configured to send messages to Slack), the company can automate the entire process with minimal custom development. This solution provides instant notifications in Slack with a high degree of automation and integration.
Topics
Community Discussion
No community discussion yet for this question.