Q20 — AWS SAP-C02 Ch.2
Question 20 of 75 | ← Chapter 2
Q170. A company needs to audit the security posture of a newly acquired AWS account. The company's data security team requires a notification only when an Amazon S3 bucket becomes publicly exposed. The company has already established an Amazon Simple Notification Service (Amazon SNS) topic that has the data security team's email address subscribed.Which solution will meet these requirements?
- A. Create an S3 event notification on all S3 buckets for the is Public event. Select the SNS topic as the target for the event notifications
- B. Create an analyzer in AWS Identity and Access Management Access Analyzer. Create an Amazon EventBridge rule for the event type "Access Analyzer Finding" with a filter for "isPublic : true." Select the SNS topic as the EventBridge rule target ✓
- C. Create an Amazon EventBridge rule for the event type "Bucket-Level API Call via CloudTrail" with a filter for "PutBucketPolicy" . Select the SNS topic as the EventBridge rule target
- D. Activate AWS Config and add the cloudtrail-s3-dataevents-enabled rule. Create an Amazon EventBridge rule for the event type "Config Rules Re-evaluation Status" with a filter for "NON COMPLIANT" Select the SNS topic as the EventBridge rule target