A company uses AWS Organizations to manage multiple AWS accounts. A CloudOps engineer must identify all IPv4 ports open to 0.0.0.0/0 across the organization's accounts. Which solution will meet this…

Question

Options

• AUse the AWS CLI to print all security group rules for review.
• BReview AWS Trusted Advisor findings in an organizational view for the Security Groups ?Specific
• CCreate an AWS Lambda function to gather security group rules from all accounts. Aggregate the
• DEnable Amazon Inspector in each account. Run an automated workload discovery job.

• A
  9% (2)
• B
  82% (18)
• C
  5% (1)
• D
  5% (1)

Explanation

According to AWS Cloud Operations and Governance documentation, AWS Trusted Advisor provides automated checks for security group rules across all accounts, including identifying ports open to 0.0.0.0/0. When viewed in organizational mode, Trusted Advisor integrates with AWS Organizations, allowing administrators to access organization-wide security findings from a central management account. This approach requires no custom code, additional infrastructure, or manual inspection, providing immediate visibility and the lowest operational overhead. AWS CLI scripts (Option A) or Lambda automation (Option C) introduce additional maintenance, and Amazon Inspector (Option D) is focused on instance-level vulnerabilities, not network access Therefore, Option B is the AWS-recommended CloudOps best practice for centralized and low- effort open-port auditing.

No community discussion yet for this question.