AWS Certified Solutions Architect - Associate

AWS Certified Solutions Architect - Associate

Get started today

Ultimate access to all questions.


A company uses Amazon EC2 instances for customer demonstration environments within isolated VPCs. How should they set up notifications for the operations team when RDP or SSH access occurs?




Explanation:

The correct option is C. By publishing VPC flow logs to Amazon CloudWatch Logs, you can create the necessary metric filters to detect specific network activity, such as RDP or SSH access. Additionally, you can leverage Amazon CloudWatch Alarms to trigger notifications based on these metrics, ensuring that the operations team is notified when such access is detected. Option A, B, and D do not directly address the need for monitoring specific network traffic access like RDP or SSH in an isolated manner across multiple VPCs.