
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A company needs to centrally configure and manage Amazon VPC security groups across multiple AWS accounts within an organization in AWS Organizations.
Which AWS service should the company use to meet these requirements?
A
AWS Firewall Manager
B
Amazon GuardDuty
C
Amazon Detective
D
AWS WAF
Explanation:
AWS Firewall Manager is the correct service for centrally configuring and managing security groups across multiple AWS accounts within an organization. It provides:
Centralized management of security groups across multiple AWS accounts
Policy-based configuration for security groups
Integration with AWS Organizations for account management
Automated enforcement of security policies
Why other options are incorrect:
Amazon GuardDuty: A threat detection service that monitors for malicious activity and unauthorized behavior
Amazon Detective: Helps analyze security findings and identify root causes of security issues
AWS WAF: A web application firewall that protects web applications from common web exploits
AWS Firewall Manager specifically addresses the requirement for centralized security group management across multiple accounts in an organization.