After a Data Leakage Incident That Led to Thousands of Stolen

question 251

Multiple Choice

After a data leakage incident that led to thousands of stolen user profiles, a compliance officer is demanding automatic, auditable security policy checks for all of the company's data stores, starting with public access of Amazon S3 buckets. Which solution will accomplish this with the LEAST amount of effort?

• A) Create a custom rule in AWS Config triggered by an S3 bucket configuration change that detects when the bucket policy or bucket ACL allows public read access. Use a remediation action to trigger an AWS Lambda function that automatically disables public access.
• B) Create a custom rule in AWS Config triggered by an S3 bucket configuration change that detects when the bucket policy or bucket ACL allows public read access. Trigger an AWS Lambda function that automatically disables public access.
• C) Use a managed rule in AWS Config triggered by an S3 bucket configuration change that detects when the bucket policy or bucket ACL allows public read access. Configure a remediation action that automatically disables public access.
• D) Use a managed rule in AWS Config triggered by an S3 bucket configuration change that detects when the bucket policy or bucket ACL allows public read access. Configure an AWS Lambda function that automatically disables public access.

---

Definitions:

Values

Fundamental beliefs or standards that guide behavior and decision-making, reflecting what individuals or societies hold as important.

Individual

Pertains to a single human being as distinct from a group, class, or family.

Triple Bottom Line

A framework that encourages companies to commit to focus on social and environmental concerns just as they do on profits, effectively balancing people, planet, and profit.

Profitability

The ability of a business to earn a profit, calculated as the difference between revenues generated and expenses incurred.