Explanation:
Automated tools and scripts are essential for performing regular audits in a cloud environment. Options A, B, and C describe valid approaches to achieve this, such as using AWS Config, CloudTrail, and custom scripts. However, option D suggests relying solely on manual reviews, which is not a scalable or efficient approach for identifying security events and generating alerts in a large-scale environment.
You have been asked to set up automated tools and scripts to perform regular audits in your company's AWS environment. Which of the following is NOT a valid approach to achieve this?
A
Use AWS Config to record configuration changes and set up automated compliance checks.
B
Leverage AWS CloudTrail to log API calls and create custom insights in AWS Security Hub.
C
Implement a custom script to scan for vulnerabilities in the company's EC2 instances and generate alerts based on the findings.
D
Rely solely on manual reviews of AWS CloudWatch logs to identify security events and generate alerts.
No comments yet.