ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS DevOps Engineer Professional All Questions

View all questions & answers for the AWS DevOps Engineer Professional exam
Go to Exam

Exam AWS DevOps Engineer Professional topic 1 question 206 discussion

Exam question from Amazon's AWS DevOps Engineer Professional
Question #: 206
Topic #: 1
[All AWS DevOps Engineer Professional Questions]

A DevOps engineer is implementing governance controls for a company that requires its infrastructure to be housed within the United States. The engineer must restrict which AWS Regions can be used, and ensure an alert is sent as soon as possible if any activity outside the governance policy takes place. The controls should be automatically enabled on any new Region outside the United States (US).

Which combination of actions will meet these requirements? (Choose two.)

  • A. Create an AWS Organizations SCP that denies access to all non-global services in non-US Regions. Attach the policy to the root of the organization.
  • B. Configure AWS CloudTrail to send logs to Amazon CloudWatch Logs and enable it for all Regions. Use a CloudWatch Logs metric filter to send an alert on any service activity in non-US Regions.
  • C. Use an AWS Lambda function that checks for AWS service activity and deploy it to all Regions. Write an Amazon EventBridge rule that runs the Lambda function every hour, sending an alert if activity is found in a non-US Region.
  • D. Use an AWS Lambda function to query Amazon Inspector to look for service activity in non-US Regions and send alerts if any activity is found.
  • E. Write an SCP using the aws:RequestedRegion condition key limiting access to US Regions. Apply the policy to all users, groups and roles.
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️
by ds50421 at March 1, 2023, 7:35 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ParagSanyashiv
2 years ago
Selected Answer: AB
AB makes more sense here
upvoted 1 times
...
stalos
2 years, 2 months ago
Its A/B - inspector checks Vulnerabilities / deploying lambda in every regions is useless / restricting all users as well
upvoted 1 times
...
SS2023
2 years, 2 months ago
Selected Answer: AB
I agree with AB
upvoted 2 times
...
saeidp
2 years, 2 months ago
Selected Answer: AB
A and B for me
upvoted 3 times
...
CloudFloater
2 years, 2 months ago
Selected Answer: AB
Option A: Restricts non-US regions. Option B: Sends alerts for non-US activity. Option C: Doesn't restrict region usage. Option D: Doesn't restrict region usage. Option E: Only restricts US regions.
upvoted 3 times
...
ds50421
2 years, 2 months ago
Selected Answer: AB
Ab is answer
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago