Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
When a new IAM user is created, CloudTrail logs the CreateUser event. EventBridge matches the event and triggers a Step Functions state machine, which removes access by calling IAM actions like detaching policies or disabling the login profile. The state machine then uses SNS to notify the security team. This architecture is fully serverless, scalable, and provides auditability, fulfilling all requirements from detection to access mitigation and alerting.
I Just do not see any reasoning to use step functions. There is no orchestration is involved here. you Just need lambda or Fargate to remove the access. D does not say anything about lambda step at all i think it is just distractor
A. Create an Amazon EventBridge (Amazon CloudWatch Events) rule. Define a pattern with the detail-type value set to AWS API Call via CloudTrail and an eventName of CreateUser. D. Invoke an AWS Step Functions state machine to remove access. E. Use Amazon Simple Notification Service (Amazon SNS) to notify the security team.