A SysOps administrator has blocked public access to all company Amazon S3 buckets. The SysOps administrator wants to be notified when an S3 bucket becomes publicly readable in the future.
What is the MOST operationally efficient way to meet this requirement?

A. Create an flaws Lambda function that periodically checks the public access settings for each S3 bucket. Set up Amazon Simple Notification Service (Amazon SNS) to send notifications.

B. Create a cron script that uses the S3 API to check the public access settings for each S3 bucket. Set up Amazon Simple Notification Service (Amazon SNS) to send notifications.

C. Enable S3 Event Notifications for each S3 bucket. Subscribe S3 Event Notifications to an Amazon Simple Notification Service (Amazon SNS) topic.

D. Enable the s3-bucket-public-read-prohibited managed rule in flaws Config. Subscribe the flaws Config rule to an Amazon Simple Notification Service (Amazon SNS) topic.








 

Correct Answer: D

This question is in SOA-C02 exam
For getting AWS Certified SysOps Administrator - Associate