Which solution would meet these requirements?

By:
In: SCS-C01
Tagged:
With: 1 Comment
A company’s director of information security wants a daily email report from AWS that contains recommendations for each company account to meet AWSSecurity best practices.

Which solution would meet these requirements?

In every AWS account, configure AWS Lambda to query the AWS Support API for AWS Trusted Advisor security checks. Send the results from Lambda to an Amazon SNS topic to send reports.

Configure Amazon GuardDuty in a master account and invite all other accounts to be managed by the master account. Use GuardDuty’s integration with Amazon SNS to report on findings.

Use Amazon Athena and Amazon QuickSight to build reports off of AWS CloudTrail. Create a daily Amazon CloudWatch trigger to run the report daily and email it using Amazon SNS.

Use AWS Artifact’s prebuilt reports and subscriptions. Subscribe the director of information security to the reports by adding the director as the security alternate contact for each account.

2025-10-11

1 Comment

  1. Donna
    Author

    I figure that the answer is:
    In every AWS account, configure AWS Lambda to query the AWS Support API for AWS Trusted Advisor security checks. Send the results from Lambda to an Amazon SNS topic to send reports.

Leave a Reply

Your email address will not be published. Required fields are marked *

four × four =