A large company is using AWS Organizations to manage hundreds of AWS accounts across multiple AWS Regions. The company has turned on AWS Config throughout the organization. The company requires all Amazon S3 buckets to block public read access. A SysOps administrator must generate a monthly report that shows all the S3 buckets and whether they comply with this requirement. Which combination of steps should the SysOps administrator take to collect this data? (Choose two.)

Question

Tomas Ojeda · Accepted Answer

Create an AWS Config aggregator in each account. Use an S3 bucket in an aggregator account as the destination. Retrieve the compliance data from the S3 bucket.

Tomas Ojeda · Accepted Answer

Use the AWS Config compliance report from the organization's management account. Filter the results by resource, and select Amazon S3.

Tomas Ojeda · Answer

Create an AWS Config aggregator in an aggregator account. Use the organization as the source. Retrieve the compliance data from the aggregator.

Tomas Ojeda · Answer

Edit the AWS Config policy in AWS Organizations. Use the organization's management account to turn on the S3-bucketpublic- read-prohibited rule for the entire organization.

Tomas Ojeda · Answer

Use the Aws Config API to apply the s3-bucket-public-read-prohibited rule in all accounts for all available Regions.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 109 - SOA-C02 discussion

Suggested answer: B, D

0 comments