AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
Your organization requires a solution to detect and alert on any unauthorized changes to IAM policies. How would you use AWS CloudTrail and AWS Config to achieve this, and how would you configure them to provide comprehensive security insights?
A
Use AWS CloudTrail for logging API calls and AWS Config for recording IAM policy changes.
B
Configure AWS Security Hub to aggregate findings from AWS CloudTrail and AWS Config.
C
Manually review each IAM policy for unauthorized changes.
D
Enable default settings on all IAM policies to ensure security.