You are working as an AWS administrator in a fintech startup.
The AWS account uses the AWS Business Support plan, and you get access to all the Trusted Advisor checks and recommendations.
Trusted Advisor reported a security issue regarding an EC2 instance Security Group one month ago.
However, the team has not noticed the issue until a recent security attack.
Now you need to set up weekly email notifications for the Trusted Advisor check results.
Which of the following methods is the easiest?
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: A.
Option A is CORRECT because this method is the most straightforward by enabling the weekly report in the Trusted Advisor Preferences:
Option B is incorrect because there is no Trusted Advisor reporting service in the CloudWatch Event rule.
Option C is incorrect because the Lambda function can be avoided here since Trusted Advisor supports weekly notifications.
As the question asks for the easiest one, option A should be chosen.
Option D is incorrect because the AWS Business Support plan does not automatically forward the Trusted Advisor reports.
Uses need to enable it in Trusted Advisor.
Reference:
https://docs.aws.amazon.com/awssupport/latest/user/get-started-with-aws-trusted-advisor.html#preferences-trusted-advisor-consoleThe correct answer for this question is option A - In the Trusted Advisor console, choose Preferences and enable Weekly Email Notification.
Trusted Advisor is an AWS service that provides recommendations to help optimize AWS resources and improve security and performance. Trusted Advisor checks for issues across several categories, including cost optimization, security, fault tolerance, and performance. AWS Business Support plan includes access to all Trusted Advisor checks and recommendations.
In this scenario, Trusted Advisor has reported a security issue regarding an EC2 instance Security Group a month ago, but the team didn't notice it until a recent security attack. Now, the AWS administrator needs to set up weekly email notifications for Trusted Advisor check results to avoid such incidents in the future.
Option A is the easiest and most straightforward way to set up weekly email notifications. In the Trusted Advisor console, the administrator can choose Preferences and enable Weekly Email Notification. This option will send weekly emails to the administrator with the results of all Trusted Advisor checks.
Option B suggests creating a CloudWatch Event rule for the Trusted Advisor reporting service. CloudWatch is a monitoring service that can be used to collect and track metrics, collect and monitor log files, and set alarms. However, creating a CloudWatch Event rule for Trusted Advisor reporting service can be more complicated than option A, which is why it is not the easiest option.
Option C suggests creating a Lambda function that collects the check results through the Trusted Advisor API and forwards the results to an SNS topic. Then, the Lambda function is executed every week to send an email notification to the administrator. While this option provides more customization, it requires creating a Lambda function, configuring API calls, and setting up an SNS topic. This option is more complex than option A and may not be necessary for a simple weekly email notification.
Option D suggests registering the email address in the alternate security contact in the AWS account settings. The AWS Business Support plan automatically forwards Trusted Advisor reports to the security contact weekly. While this option can provide automated email notifications, it requires setting up the alternate security contact in the AWS account settings, which may not be feasible or desired.
In conclusion, the easiest option for setting up weekly email notifications for Trusted Advisor check results is option A - In the Trusted Advisor console, choose Preferences and enable Weekly Email Notification.