A CloudOps engineer must ensure that all of a company's current and future Amazon S3 buckets have logging enabled. If an S3 bucket does not have logging enabled, an automated process must enable…

Question

Options

• AUse AWS Trusted Advisor to perform a check for S3 buckets that do not have logging enabled.
• BConfigure an S3 bucket policy that requires all current and future S3 buckets to have logging
• CUse the s3-bucket-logging-enabled AWS Config managed rule. Add a remediation action that
• DUse the s3-bucket-logging-enabled AWS Config managed rule. Add a remediation action that

• A
  5% (1)
• B
  5% (1)
• C
  9% (2)
• D
  82% (18)

Explanation

The AWS Config managed rule s3-bucket-logging-enabled continuously evaluates whether S3 buckets have logging enabled. By attaching an automatic remediation action using the AWS- ConfigureS3BucketLogging Systems Manager Automation runbook, AWS can automatically enable logging for any noncompliant bucket. This provides a fully automated and scalable solution that applies to both existing and newly created buckets with minimal operational effort.

No community discussion yet for this question.