AWS Certified DevOps Engineer - Professional Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C of course. But A seems working, and does Aws Config work in this situation?

• Chose C3

  By creating an EventBridge event rule with the appropriate event pattern and configuring it to invoke the Lambda function, the DevOps engineer can effectively detect security group rule changes in near real-time, remove unrestricted rules, and send notifications to the security team. This solution leverages the event-driven architecture of EventBridge and the serverless execution of AWS Lambda, providing a scalable and efficient way to meet the company's security requirements.

• 6

  C is correct: A: lambda should be invoked by Eventbridge B: we need to act when there is events, not schedully D: subscribing to events from ALL AWS services incurs a huge cost