You Have a High Security Requirement for Your AWS Accounts

question 7

Multiple Choice

You have a high security requirement for your AWS accounts. What is the most rapid and sophisticated setup you can use to react to AWS API calls to your account?

• A) Subscription to AWS Config via an SNS Topic. Use a Lambda Function to perform in-flight analysis and reactivity to changes as they occur.
• B) Global AWS CloudTrail setup delivering to S3 with an SNS subscription to the deliver notifications, pushing into a Lambda, which inserts records into an ELK stack for analysis.
• C) Use a CloudWatch Rule ScheduleExpression to periodically analyze IAM credential logs. Push the deltas for events into an ELK stack and perform ad-hoc analysis there.
• D) CloudWatch Events Rules which trigger based on all AWS API calls, submitting all events to an AWS Kinesis Stream for arbitrary downstream analysis.

---

Definitions:

Equivalent Units

A concept in cost accounting used to calculate the units produced during a period in terms of fully completed units.

Direct Materials

Raw materials that can be directly attributed to the manufacturing process of a product.

Direct Labor

The wages or salaries paid to workers who are directly involved in the production of goods or services.

Indirect Materials

Materials used in the production process but not directly traceable to a specific product.