A Company Uses Federated Access for Its AWS Environment

question 189

Multiple Choice

A company uses federated access for its AWS environment. The company creates and manages IAM roles by using AWS CloudFormation from a CI/CD pipeline. All changes should be made to the IAM roles through the pipeline. The company's security team discovers that out-of-band changes are being made to the IAM roles. The security team needs a way to detect when these out-of-band changes occur. What should a DevOps engineer do to meet this requirement?

• A) Use Amazon Inspector rules to detect and notify when an AWS CloudFormation stack has a configuration change.
• B) Use AWS Trusted Advisor to detect and notify when an AWS CloudFormation stack has a configuration change.
• C) Use AWS CloudTrail to detect and notify when an AWS CloudFormation stack detects a configuration change.
• D) Use an AWS Config rule to detect and notify when AWS CloudFormation drift detection identifies a configuration change.

---

Definitions:

Make-to-order

A manufacturing process in which the production of an item begins only after a confirmed customer order is received.

Customer Order

A customer order is an official request made by a customer for a company's goods or services, typically documented and processed for fulfillment.

SCM

Supply Chain Management involves the management and control of materials, information, and financial flows from the supplier through to the manufacturer, then on to the wholesaler and retailer, and ultimately to the consumer.

Source Component

In software, a fundamental piece of code or module that contributes to the functionality of a larger application or system.