A Security Engineer Has Been Asked to Create an Automated

question 238

Multiple Choice

A Security Engineer has been asked to create an automated process to disable IAM user access keys that are more than three months old. Which of the following options should the Security Engineer use?

• A) In the AWS Console, choose the IAM service and select "Users". Review the "Access Key Age" column.
• B) Define an IAM policy that denies access if the key age is more than three months and apply to all users.
• C) Write a script that uses the GenerateCredentialReport, GetCredentialReport, and UpdateAccessKey APIs.
• D) Create an Amazon CloudWatch alarm to detect aged access keys and use an AWS Lambda function to disable the keys older than 90 days.

---

Definitions:

Legally Binding

A term applied to agreements or contracts that have legal force, meaning they are enforceable by law.

Contracts

Legally enforceable agreements between two or more parties that create mutual obligations.

Minor

A person under the legal age of majority, typically under 18 years old, who has certain restrictions on their legal capabilities such as entering into contracts.

Contract

A binding legal agreement between two or more parties that is enforceable by law, specifying obligations each must fulfill.