SOA-C02 · Question #710
A company has turned on server access logging for all of its existing Amazon S3 buckets. The company wants to implement a solution to monitor the logging settings for new and existing S3 buckets…
The correct answer is B. Configure automatic remediation in AWS Config by using the s3-bucket-logging-enabled rule. Use the AWS Config managed rule s3-bucket-logging-enabled with an automatic remediation action. It continuously evaluates all buckets (new and existing) and, when logging is off, runs the remediation to enable it - minimal code and ongoing compliance.
Question
A company has turned on server access logging for all of its existing Amazon S3 buckets. The company wants to implement a solution to monitor the logging settings for new and existing S3 buckets. The solution must remediate any S3 buckets that do not have logging turned on. What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?
Options
- ATrack the logging information by using AWS CloudTrail. Launch an AWS Lambda function for
- BConfigure automatic remediation in AWS Config by using the s3-bucket-logging-enabled rule.
- CConfigure AWS Trusted Advisor to monitor the logging configuration and to turn on access logging
- DTrack the logging information by using Amazon CloudWatch metrics. Launch an AWS Lambda
How the community answered
(28 responses)- A11% (3)
- B82% (23)
- C4% (1)
- D4% (1)
Explanation
Use the AWS Config managed rule s3-bucket-logging-enabled with an automatic remediation action. It continuously evaluates all buckets (new and existing) and, when logging is off, runs the remediation to enable it - minimal code and ongoing compliance.
Topics
Community Discussion
No community discussion yet for this question.