A DevOps Engineer Is Scheduling Legacy AWS KMS Keys for Deletion

question 588

Multiple Choice

A DevOps engineer is scheduling legacy AWS KMS keys for deletion and has created a remediation AWS Lambda function that will re-enable a key if necessary. The engineer wants to automate this process with available AWS CloudTrail data so, if a key scheduled for deletion is in use, it will be re-enabled. Which solution enables this automation?

• A) Create an Amazon CloudWatch Logs metric filter and alarm for KMS events with an error message. Set the remediation Lambda function as the target of the alarm.
• B) Create an Amazon CloudWatch Logs metric filter and alarm for KMS events with an error message. Create an Amazon SNS topic as the target of the alarm. Subscribe the remediation Lambda function to the SNS topic.
• C) Create an Amazon CloudWatch Events rule pattern looking for KMS service events with an error message. Create an Amazon SNS topic as the target of the rule. Subscribe the remediation Lambda function to the SNS topic.
• D) Use Amazon CloudTrail to alert for KMS service events with an error message. Set the remediation Lambda function as the target of the rule.

---

Definitions:

U.S. GAAP

The United States Generally Accepted Accounting Principles, a framework of accounting standards, principles, and procedures used in the U.S.

Written Down

A term referring to an asset that has been depreciated or devalued on the financial statements.

Carrying Value

The amount an asset is valued at on a balance sheet, subtracting depreciation and amortization.

Value Recovers

The process by which the market value of an asset increases after a period of decline.