Answer-first summary for fast verification
Answer: Use AWS CloudTrail for logging API calls and AWS Config for recording IAM policy changes.
Using AWS CloudTrail for logging API calls and AWS Config for recording IAM policy changes provides a comprehensive way to detect and alert on unauthorized changes. This approach ensures that IAM policies are monitored and managed effectively.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
Your organization requires a solution to detect and alert on any unauthorized changes to IAM policies. How would you use AWS CloudTrail and AWS Config to achieve this, and how would you configure them to provide comprehensive security insights?
A
Use AWS CloudTrail for logging API calls and AWS Config for recording IAM policy changes.
B
Configure AWS Security Hub to aggregate findings from AWS CloudTrail and AWS Config.
C
Manually review each IAM policy for unauthorized changes.
D
Enable default settings on all IAM policies to ensure security.