A large company is using AWS Organizations to manage hundreds of AWS accounts across multiple AWS Regions. The company has turned on AWS Config throughout the organization. The company requires all Amazon S3 buckets to block public read access. A SysOps administrator must generate a monthly report that shows all the S3 buckets and whether they comply with this requirement. Which combination of steps should the SysOps administrator take to collect this data? (Choose two.)

Question

Accepted Answer

B. Create an AWS Config aggregator in each account. Use an S3 bucket in an aggregator D. Use the AWS Config compliance report from the organization's management account. Filter the

Answer

A. Create an AWS Config aggregator in an aggregator account. Use the organization as the

Answer

C. Edit the AWS Config policy in AWS Organizations. Use the organization's management

Answer

E. Use the Aws Config API to apply the s3-bucket-public-read-prohibited rule in all accounts for all

A large company is using AWS Organizations to manage hundreds of AWS accounts across multiple AWS Regions. The company has turned on AWS Config throughout the organization. The company requires all…

Question

Options

How the community answered

Explanation

Topics

Community Discussion