AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 62

Question

A company purchased a subscription to a third-party cloud security scanning solution that integrates with AWS Security Hub. A security engineer needs to implement a solution that will remediate the findings from the third-party scanning solution automatically. Which solution will meet this requirement?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Set up an Amazon EventBridge rule that reacts to new Security Hub findings. Configure an AWS Lambda function as the target for the rule to remediate the findings. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS Security Hub centralizes security findings and compliance checks.

AWS Certified Security - Specialty SCS-C02 — Question 62