A Company Experienced a Breach of Highly Confidential Personal Information

question 182

Multiple Choice

A company experienced a breach of highly confidential personal information due to permission issues on an Amazon S3 bucket. The Information Security team has tightened the bucket policy to restrict access. Additionally, to be better prepared for future attacks, these requirements must be met: Identify remote IP addresses that are accessing the bucket objects. Receive alerts when the security policy on the bucket is changed. Remediate the policy changes automatically. Which strategies should the Solutions Architect use?

• A) Use Amazon CloudWatch Logs with CloudWatch filters to identify remote IP addresses. Use CloudWatch Events rules with AWS Lambda to automatically remediate S3 bucket policy changes. Use Amazon SES with CloudWatch Events rules for alerts.
• B) Use Amazon Athena with S3 access logs to identify remote IP addresses. Use AWS Config rules with AWS Systems Manager Automation to automatically remediate S3 bucket policy changes. Use Amazon SNS with AWS Config rules for alerts.
• C) Use S3 access logs with Amazon Elasticsearch Service and Kibana to identify remote IP addresses. Use an Amazon Inspector assessment template to automatically remediate S3 bucket policy changes. Use Amazon SNS for alerts.
• D) Use Amazon Macie with an S3 bucket to identify access patterns and remote IP addresses. Use AWS Lambda with Macie to automatically remediate S3 bucket policy changes. Use Macie automatic alerting capabilities for alerts.

---

Definitions:

Voting Trust

An arrangement where shareholders' voting rights are transferred to a trustee, usually for the purpose of ensuring unified action or to resolve conflicts.

Share Titles

The formal documents that serve as evidence of ownership of stocks or shares in a corporation.

Trustee

A person or firm that holds and administers property or assets for the benefit of a third party.

Business Judgment Rule

A legal principle that protects the decisions made by the board of directors of a corporation as long as those decisions are made in good faith, with due care, and in the best interests of the corporation.