SCS-C02 · Question #80
A company is implementing new compliance requirements to meet customer needs. According to the new requirements, the company must not use any Amazon RDS DB instances or DB clusters that lack…
The correct answer is A. Create an AWS Config managed rule to detect unencrypted RDS storage. Configure an. Using an AWS Config managed rule to detect unencrypted RDS storage is the most operationally efficient solution. AWS Config continuously monitors compliance of AWS resources and can automatically remediate non-compliant resources. By configuring the managed rule to detect…
Question
A company is implementing new compliance requirements to meet customer needs. According to the new requirements, the company must not use any Amazon RDS DB instances or DB clusters that lack encryption of the underlying storage. The company needs a solution that will generate an email alert when an unencrypted DB instance or DB cluster is created. The solution also must terminate the unencrypted DB instance or DB cluster. Which solution will meet these requirements in the MOST operationally efficient manner?
Options
- ACreate an AWS Config managed rule to detect unencrypted RDS storage. Configure an
- BCreate an AWS Config managed rule to detect unencrypted RDS storage. Configure a manual
- CCreate an Amazon EventBridge rule that evaluates RDS event patterns and is initiated by the
- DCreate an Amazon EventBridge rule that evaluates RDS event patterns and is initiated by the
How the community answered
(27 responses)- A81% (22)
- B4% (1)
- C11% (3)
- D4% (1)
Explanation
Using an AWS Config managed rule to detect unencrypted RDS storage is the most operationally efficient solution. AWS Config continuously monitors compliance of AWS resources and can automatically remediate non-compliant resources. By configuring the managed rule to detect unencrypted RDS instances and an automatic remediation action, AWS Config can publish an alert to an SNS topic and invoke a Lambda function to delete the non-compliant (unencrypted) RDS instance or DB cluster. This approach ensures immediate detection, alerting, and remediation without requiring manual intervention.
Topics
Community Discussion
No community discussion yet for this question.