A Company Manages Multiple AWS Accounts Using AWS Organizations

question 255

Multiple Choice

A company manages multiple AWS accounts using AWS Organizations. The company's security team notices that some member accounts are not sending AWS CloudTrail logs to a centralized Amazon S3 logging bucket. The security team wants to ensure there is at least one trail configured for all existing accounts and for any account that is created in the future. Which set of actions should the security team implement to accomplish this?

• A) Create a new trail and configure it to send CloudTrail logs to Amazon S3. Use Amazon EventBridge (Amazon CloudWatch Events) to send notification if a trail is deleted or stopped.
• B) Deploy an AWS Lambda function in every account to check if there is an existing trail and create a new trail, if needed.
• C) Edit the existing trail in the Organizations master account and apply it to the organization.
• D) Create an SCP to deny the cloudtrail:Delete* and cloudtrail:Stop* actions. Apply the SCP to all accounts.

---

Definitions:

Tactical Impression Management

The selective use of self-presentation tactics by a person who wishes to manipulate the impressions that others form of him or her.

Alter-Casting

A tactic in social interaction where one person imposes a role or identity onto another person, often to influence behavior in a desired direction.

Defining the Situation

The process of interpreting or framing a situation to understand its meaning, implications, and what actions should be taken.

Self-Disclosure

The act of revealing personal information or feelings to others, facilitating intimacy and trust in relationships.