SOA-C02 · Question #651
A company is worried that its developers might accidentally schedule AWS Key Management Service (AWS KMS) customer managed keys for deletion. The developers want to maintain agility in their DevOps…
The correct answer is B. Create an Amazon EventBridge rule to detect KMS key deletion events from AWS CloudTrail. D. Create an Amazon Simple Notification Service (Amazon SNS) topic as a target for notifications. Create an Amazon EventBridge rule to detect KMS key deletion events from AWS CloudTrail. CloudTrail records API events such as ScheduleKeyDeletion. By setting up an EventBridge rule that filters for these events, you can trigger notifications whenever a KMS key deletion is…
Question
A company is worried that its developers might accidentally schedule AWS Key Management Service (AWS KMS) customer managed keys for deletion. The developers want to maintain agility in their DevOps operating model and have requested that their IAM permissions not be changed. The company's security team must receive notification when a KMS key deletion is scheduled. Which combination of steps will meet these requirements? (Choose two.)
Options
- AUse Amazon Macie to monitor for KMS key deletion events. Configure Macie to send the events
- BCreate an Amazon EventBridge rule to detect KMS key deletion events from AWS CloudTrail.
- CCreate an Amazon Timestream for LiveAnalytics database to store KMS key deletion events.
- DCreate an Amazon Simple Notification Service (Amazon SNS) topic as a target for notifications.
- ECreate an Amazon MQ queue as a target for notifications.
How the community answered
(41 responses)- A15% (6)
- B76% (31)
- C7% (3)
- E2% (1)
Explanation
Create an Amazon EventBridge rule to detect KMS key deletion events from AWS CloudTrail. CloudTrail records API events such as ScheduleKeyDeletion. By setting up an EventBridge rule that filters for these events, you can trigger notifications whenever a KMS key deletion is Create an Amazon Simple Notification Service (Amazon SNS) topic as a target for notifications. You can configure the EventBridge rule to send the matching events to an SNS topic. The security team can subscribe to this SNS topic to receive immediate notifications.
Topics
Community Discussion
No community discussion yet for this question.