A retail corporation manages multiple AWS accounts using AWS Organizations. The security team wants to establish a centralized security monitoring solution to detect threats, such as anomalous behavior or unauthorized API calls, and aggregate security compliance findings across all member accounts. The solution must align with the AWS Well-Architected Framework.
Which combination of actions should a solutions architect recommend to meet these requirements? (Select TWO.)
- Enable Amazon GuardDuty in all accounts, and designate a security account as the delegated administrator to centrally manage threat detection findings.Cevap
- Enable AWS Security Hub in all accounts, and designate the security account as the delegated administrator to aggregate security and compliance alerts.Cevap
- CConfigure stateless Network ACLs on all subnets to inspect and block unauthorized AWS API calls at the network boundary.
- DDeploy AWS Shield Standard on the Application Load Balancers to inspect incoming HTTP/HTTPS requests for application-layer SQL injection exploits.
- EStore sensitive API credentials as plaintext parameters in the Systems Manager Parameter Store to facilitate quick environment configuration audits.
Cevap
Enable Amazon GuardDuty in all accounts with a delegated administrator, and enable AWS Security Hub in all accounts with a delegated administrator.
The correct options are enabling Amazon GuardDuty and AWS Security Hub with delegated administrator accounts. GuardDuty leverages machine learning, anomaly detection, and threat intelligence to identify suspicious activities like unauthorized API calls. Security Hub acts as the single pane of glass to aggregate and prioritize compliance assessments and alerts across the AWS Organizations hierarchy.
Adım Adım Çözüm
Anahtar Kavram
Centralized threat detection and security aggregation in multi-account organizations.
Tahmini Süre:2m 0s