You Have a High Security Requirement for Your AWS Accounts

question 7

Multiple Choice

You have a high security requirement for your AWS accounts. What is the most rapid and sophisticated setup you can use to react to AWS API calls to your account?

• A) Subscription to AWS Config via an SNS Topic. Use a Lambda Function to perform in-flight analysis and reactivity to changes as they occur.
• B) Global AWS CloudTrail setup delivering to S3 with an SNS subscription to the deliver notifications, pushing into a Lambda, which inserts records into an ELK stack for analysis.
• C) Use a CloudWatch Rule ScheduleExpression to periodically analyze IAM credential logs. Push the deltas for events into an ELK stack and perform ad-hoc analysis there.
• D) CloudWatch Events Rules which trigger based on all AWS API calls, submitting all events to an AWS Kinesis Stream for arbitrary downstream analysis.

---

Definitions:

Syntax

The set of rules that governs the structure of sentences in a language.

Insight

The ability to understand the inner nature of things or to gain an intuitive understanding of complex situations.

Availability Heuristic

A mental shortcut that relies on immediate examples that come to a given person's mind when evaluating a specific topic, concept, method or decision.

Trial And Error

A problem-solving method that involves attempting different solutions and eliminating those that do not work.