SCS-C02 · Question #71
A company has a requirement that none of its Amazon RDS resources can be publicly accessible. A security engineer needs to set up monitoring for this requirement and must receive a near-real-time noti
The correct answer is B. Configure the rds-instance-public-access-check AWS Config managed rule to monitor the RDS C. Configure the Amazon EventBridge (Amazon CloudWatch Events) rule to target an Amazon E. Configure an Amazon EventBridge (Amazon CloudWatch Events) rule that is invoked by a. ConfigRuleName: "rds-instance-public-access-check" >> Amazon EventBridge (Amazon CloudWatch Events) >> Amazon Simple Notification Service (Amazon SNS) https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-public-access-check.html
Question
A company has a requirement that none of its Amazon RDS resources can be publicly accessible. A security engineer needs to set up monitoring for this requirement and must receive a near-real-time notification if any RDS resource is noncompliant. Which combination of steps should the security engineer take to meet these requirements? (Choose three.)
Options
- AConfigure RDS event notifications on each RDS resource. Target an AWS Lambda function that
- BConfigure the rds-instance-public-access-check AWS Config managed rule to monitor the RDS
- CConfigure the Amazon EventBridge (Amazon CloudWatch Events) rule to target an Amazon
- DConfigure RDS event notifications to post events to an Amazon Simple Queue Service (Amazon
- EConfigure an Amazon EventBridge (Amazon CloudWatch Events) rule that is invoked by a
- FConfigure an Amazon EventBridge (Amazon CloudWatch Events) rule that is invoked when the
How the community answered
(62 responses)- A8% (5)
- B77% (48)
- D3% (2)
- F11% (7)
Explanation
ConfigRuleName: "rds-instance-public-access-check" >> Amazon EventBridge (Amazon CloudWatch Events) >> Amazon Simple Notification Service (Amazon SNS) https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-public-access-check.html
Topics
Community Discussion
No community discussion yet for this question.