Amazon Web Services AWS Certified SysOps Administrator - Associate SOA-C01 Question # 20 Topic 3 Discussion

Amazon Web Services AWS Certified SysOps Administrator - Associate SOA-C01 Question # 20 Topic 3 Discussion

SOA-C01 Exam Topic 3 Question 20 Discussion:
Question #: 20
Topic #: 3

A company’s Auditor implemented a compliance requirement that all Amazon S3 buckets must have logging enabled.

How should the SysOps Administrator ensure this compliance requirement is met, while still permitting Developers to create and use new S3 buckets?


A.

Add AWS CloudTrail logging for the S3 buckets.


B.

Implement IAM policies to allow only the Storage team to create S3 buckets.


C.

Add the AWS Config managed rule S3_BUCKET_LOGGING_ENABLED.


D.

Create an AWS Lambda function to delete the S3 buckets if logging is not turned on.


Get Premium SOA-C01 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.