A company wants to monitor the security groups of its Amazon EC2 instances to ensure that SSH is not open to the public. If the port is opened, the company needs to close the port as soon as…

Question

Options

• AAdd an Amazon CloudWatch alarm to detect the security groups that allow SSH.
• BAdd an AWS Config rule to detect the security groups that allow SSH.
• CAdd an assessment template to Amazon Inspector to detect the security groups that allow SSH.
• DCall an AWS Systems Manager Automation runbook to close the port.
• ECall AWS Systems Manager Run Command to close the port.

• A
  5% (1)
• B
  74% (14)
• C
  16% (3)
• E
  5% (1)

Explanation

Add an AWS Config rule to detect the security groups that allow SSH. By creating a custom AWS Config rule, you can define the desired configuration that checks if SSH ports are open in security groups. This rule will evaluate the current state of the security groups and report any violations. Call an AWS Systems Manager Automation runbook to close the port. Set up an AWS Systems Manager Automation runbook that can be triggered when a violation is detected by the AWS Config rule. The runbook should include the necessary steps to close the SSH port in the affected security groups, ensuring that the port is no longer accessible to the

No community discussion yet for this question.