A company needs to enforce tagging requirements for Amazon DynamoDB tables in its AWS accounts. A CloudOps engineer must implement a solution to identify and remediate all DynamoDB tables that do…

Question

Options

• ACreate a custom AWS Lambda function to evaluate and remediate all DynamoDB tables. Create
• BCreate a custom AWS Lambda function to evaluate and remediate all DynamoDB tables. Create
• CUse the required-tags AWS Config managed rule to evaluate all DynamoDB tables for the
• DCreate an Amazon EventBridge managed rule to evaluate all DynamoDB tables for the

• A
  14% (4)
• B
  7% (2)
• C
  75% (21)
• D
  4% (1)

Explanation

According to the AWS Cloud Operations, Governance, and Compliance documentation, AWS Config provides managed rules that automatically evaluate resource configurations for compliance. The "required-tags" managed rule allows CloudOps teams to specify mandatory tags (e.g., Environment, Owner, CostCenter) and automatically detect non-compliant resources such as DynamoDB tables. Furthermore, AWS Config supports automatic remediation through AWS Systems Manager Automation runbooks, enabling correction actions (for example, adding missing tags) without manual intervention. This automation minimizes operational overhead and ensures continuous compliance across multiple accounts. Using a custom Lambda function (Options A or B) introduces unnecessary management complexity, while EventBridge rules alone (Option D) do not provide resource compliance tracking or historical visibility. Therefore, Option C provides the most efficient, fully managed, and compliant CloudOps solution.

No community discussion yet for this question.