A Company's Security Team Discovers That IAM Access Keys Were

question 242

Multiple Choice

A company's security team discovers that IAM access keys were exposed in a public code repository. Moving forward, the DevOps team wants to implement a solution that will automatically disable any keys that are suspected of being compromised, and notify the security team. Which solution will accomplish this?

• A) Create an Amazon CloudWatch Events event for Amazon Macie. Create an Amazon SNS topic with two subscriptions: one to notify the security team and another to trigger an AWS Lambda function that disables the access keys.
• B) Enable Amazon GuardDuty and set up an Amazon CloudWatch Events rule event for GuardDuty. Trigger an AWS Lambda function to check if the event relates to compromised keys. If so, send a notification to the security team and disable the access keys.
• C) Run an AWS CloudWatch Events rule every 5 minutes to invoke an AWS Lambda function that checks to see if the compromised tag for any access key is set to true. If so, notify the security team and disable the access keys.
• D) Set up AWS Config and create an AWS CloudTrail event for AWS Config. Create an Amazon SNS topic with two subscriptions: one to notify the security team and another to trigger an AWS Lambda function that disables the access keys.

---

Definitions:

Unused Capacity

The portion of a production facility or resource that is available but not currently in use or producing outputs.

Job-Order Costing

An accounting method that tracks costs individually for each job, suitable for businesses that produce custom products or services.

Automated Bandsaw

A type of sawing machine equipped with a blade in the form of a continuous band and automated for efficient cutting operations.

Unused Capacity

Represents resources or facilities available but not currently being utilized to their full potential in the production process.