Answer-first summary for fast verification
Answer: Create an EventBridge rule with source aws.acm; evaluate the DaysToExpiry metric; send to an SNS topic if < 14; subscribe email addresses.
ACM publishes DaysToExpiry metric to CloudWatch. EventBridge can monitor ACM events or use CloudWatch alarm but direct EventBridge with metric filter or scheduled with evaluation, but option B uses EventBridge for ACM and evaluate metric, send to SNS. Least overhead is using built-in ACM expiration events or simple alarm, but B is efficient.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
A SysOps administrator must send an email notification when an ACM certificate has fewer than 14 days until expiration. Which solution has LEAST operational overhead?
A
Create a custom CloudWatch metric for certificate expiration; create an EventBridge rule with source aws.cloudwatch; notify via SNS.
B
Create an EventBridge rule with source aws.acm; evaluate the DaysToExpiry metric; send to an SNS topic if < 14; subscribe email addresses.
C
Create a CloudWatch dashboard showing DaysToExpiry; manually send email by running a CLI command when < 14.
D
Create an EventBridge rule with source aws.acm; configure a target SMS identity with an email template.
No comments yet.