A banking company has an application that must connect to specific public IP addresses from a VPC. A network e

Question

A banking company has an application that must connect to specific public IP addresses from a VPC. A network engineer has configured routes in The route table that is associated with the application’s subnet to the required public IP addresses through an internet gateway. The network engineer needs to set up email notifications that will alert the network engineer when a user adds a default route to the application Subnet's route table with the internet gateway as a target. Which solution will meet these requirements with the LEAST implementation effort?

Accepted Answer

A. Create an AWS Lambda function that reads the routes in the route table and sends an email notification. Configure the Lambda function to Send an email notification if any route is configured with 0.0.0.0/0 or ::/0 CIDRs to the internet gateway. Configure the Lambda function to run Every minute.

Answer

B. Create an AWS Lambda function that will be invoked by an Amazon EC2 CreateRoute API call. Configure the Lambda function to send an Email notification. Configure the Lambda function to send an email notification if any route is configured with 0.0.0.0/0 or ::/0 CIDRs to the Internet gateway.

Answer

C. Create AWS Config rules for the route table by using the internet-gateway-authorized-vpc-only managed rule. Create an Amazon EventBridge Rule to match the AWS Config rule and to route to an Amazon Simple Notification Service (Amazon SNS) topic to send an email notification.

Answer

D. Create an AWS Config rule for the route table by using the no-unrestricted-route-to-igw managed rule. Create an Amazon EventBridge rule to Match the AWS Config rule and to route to an Amazon Simple Notification Service (Amazon SNS) topic to send an email notification.

Q95 — AWS ANS-C01 Ch.1

Explanation