A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any security groups that use 0.0.0.0/0 as the source address for inbound traffic. The company also wants to automatically remediate any noncompliant security groups by restricting access to a specific CIDR block that corresponds with the company's intranet. Which set of actions should the SysOps administrator take to create a solution?

Question

Accepted Answer

A. Create an AWS Config rule to detect noncompliant security groups.

Answer

B. Create an IAM policy to deny the creation of security groups that have 0.0.0.0/0 as the source

Answer

C. Create an AWS Lambda function to inspect new and existing security groups.

Answer

D. Create a service control policy (SCP) for the organizational unit (OU) to deny the creation of

A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any security groups that use 0.0.0.0/0 as the source address for inbound traffic. The company…

Question

Options

How the community answered

Explanation

Topics

Community Discussion