nerdexam
Amazon

SOA-C02 · Question #712

A company has an AWS account that multiple teams use. A SysOps administrator needs to identify any IAM users and roles in the account that have not been used within the last 30 days. The SysOps…

The correct answer is B. Create an analyzer in AWS Identity and Access Management Access Analyzer. Configure unused E. Create an Amazon EventBridge rule. Configure an event pattern that has a source of aws.access-. IAM Access Analyzer’s unused access analysis finds IAM users and roles with no activity over a set period (30 days). Creating an EventBridge rule with source aws.access-analyzer and detail type “Unused Access Finding for IAM Entities” sends those findings to the SNS topic.

Submitted by yasin.bd· Mar 30, 2026Monitoring, Logging, and Remediation

Question

A company has an AWS account that multiple teams use. A SysOps administrator needs to identify any IAM users and roles in the account that have not been used within the last 30 days. The SysOps administrator has created an Amazon Simple Notification Service (Amazon SNS) topic that must receive notifications about the unused identities. Which combination of steps will meet these requirements? (Choose two.)

Options

  • AConfigure and start an AWS Config configuration recorder. Add the iam-user-unused-credentials-
  • BCreate an analyzer in AWS Identity and Access Management Access Analyzer. Configure unused
  • CConfigure the AWS Config delivery channel to use the SNS topic. Add a filter policy to the delivery
  • DCreate an Amazon EventBridge rule. Configure an event pattern that has a source of aws.iam and
  • ECreate an Amazon EventBridge rule. Configure an event pattern that has a source of aws.access-

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    73% (24)
  • C
    9% (3)
  • D
    12% (4)

Explanation

IAM Access Analyzer’s unused access analysis finds IAM users and roles with no activity over a set period (30 days). Creating an EventBridge rule with source aws.access-analyzer and detail type “Unused Access Finding for IAM Entities” sends those findings to the SNS topic.

Topics

#IAM Access Analyzer#unused IAM identities#EventBridge access-analyzer events#SNS notifications

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SOA-C02 Practice