A Solutions Architect Must Provide an Automated Solution for a Company's

question 438

Multiple Choice

A solutions architect must provide an automated solution for a company's compliance policy that states security groups cannot include a rule that allows SSH from 0.0.0.0/0. The company needs to be notified if there is any breach in the policy. A solution is needed as soon as possible. What should the solutions architect do to meet these requirements with the LEAST operational overhead?

• A) Write an AWS Lambda script that monitors security groups for SSH being open to 0.0.0.0/0 addresses and creates a notification every time it finds one.
• B) Enable the restricted-ssh AWS Config managed rule and generate an Amazon Simple Notification Service (Amazon SNS) notification when a noncompliant rule is created.
• C) Create an IAM role with permissions to globally open security groups and network ACLs. Create an Amazon Simple Notification Service (Amazon SNS) topic to generate a notification every time the role is assumed by a user.
• D) Configure a service control policy (SCP) that prevents non-administrative users from creating or editing security groups. Create a notification in the ticketing system when a user requests a rule that needs administrator permissions.

---

Definitions:

External Validity

The extent to which the results of a study can be generalized to other situations and to other people outside of the experimental conditions.

Internal Validity

The extent to which a study establishes a trustworthy cause-and-effect relationship between a treatment and an outcome, avoiding confounding variables.

Testosterone Levels

Refers to the concentration of the hormone testosterone in the body, which plays a key role in male sexual development, muscle mass, bone density, and mood regulation.

Sensation Seeking

The tendency to seek out varied, novel, complex, and intense sensations and experiences, and the willingness to take physical, social, legal, and financial risks for the sake of such experiences.