A DevOps Engineer Is Implementing Governance Controls for a Company

question 422

Multiple Choice

A DevOps engineer is implementing governance controls for a company that requires its infrastructure to be housed within the United States. The engineer must restrict which Regions can be used, and ensure an alert is sent as soon as possible if any activity outside the governance policy takes place. The controls should be automatically enabled on any new Region outside the United States. Which combination of actions will meet these requirements? (Choose two.)

• A) Create an AWS Organizations SCP that denies access to all non-global services in non-US Regions. Attach the policy to the root of the organization.
• B) Configure AWS CloudTrail to send logs to Amazon CloudWatch Logs and enable it for all Regions. Use a CloudWatch Logs metric filter to send an alert on any service activity in non-US Regions.
• C) Use an AWS Lambda function that checks for AWS service activity and deploy it to all Regions. Write an Amazon CloudWatch Events rule that runs the Lambda function every hour, sending an alert if activity is found in a non-US Region.
• D) Use an AWS Lambda function to query Amazon Inspector to look for service activity in non-US Regions and send alerts if any activity is found.
• E) Write an SCP using the aws:RequestedRegion condition key limiting access to US Regions. Apply the policy to all users, groups, and roles.

---

Definitions:

Laspeyres Price Index

A price index used to measure the change in the cost of purchasing a fixed basket of goods and services over time, based on the quantities purchased in the base period.

Consumption Bundle

A set of goods or services that an individual or household chooses to consume within a given period, reflecting their preferences and budget constraint.

Prices

Monetary values assigned to goods and services, determining what amount of money is needed to purchase them.

Laspeyres Price Index

A measure of the change in the aggregate price level of a basket of goods and services over time, using the quantities purchased in the base year.