SAA-C03 Question 82

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  AWS Trusted Advisor + CloudWatch Alarm + SNS since the certificate is imported not AWS managed.

• Chose B2

  Breaking the tie with Chat AI (even rhymes)) - Use the managed AWS Config rule acm-certificate-expiration-check with daysToExpiration = 30. When the rule flags a noncompliant certificate, have EventBridge trigger an SNS notification to the security team.

• Chose B1

  aws config provide a managed rule