A Government Agency Is Storing Highly Confidential Files in an Encrypted

question 427

Multiple Choice

A government agency is storing highly confidential files in an encrypted Amazon S3 bucket. The agency has configured federated access and has allowed only a particular on-premises Active Directory user group to access this bucket. The agency wants to maintain audit records and automatically detect and revert any accidental changes administrators make to the IAM policies used for providing this restricted federated access. Which of the following options provide the FASTEST way to meet these requirements?

• A) Configure an Amazon CloudWatch Events Event Bus on an AWS CloudTrail API for triggering the AWS Lambda function that detects and reverts the change.
• B) Configure an AWS Config rule to detect the configuration change and execute an AWS Lambda function to revert the change.
• C) Schedule an AWS Lambda function that will scan the IAM policy attached to the federated access role for detecting and reverting any changes.
• D) Restrict administrators in the on-premises Active Directory from changing the IAM policies.

---

Definitions:

Phosphate

Phosphate is a chemical compound containing phosphorus and oxygen, vital for many biological processes, including energy transfer and bone formation.

Teratogens

Agents or factors that cause malformation of an embryo or fetus, such as chemicals, viruses, and drugs.

Sex Chromosome

A type of chromosome involved in determining the sex of an organism, with the most common configuration being XX for females and XY for males in humans.

Chromosomes

Thread-like structures located inside the nucleus of animal and plant cells, made of protein and a single molecule of DNA, which carry genetic information.