AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 117

Question

A company is running an application in the AWS Cloud. The company's security team must approve the creation of all new IAM users. When a new IAM user is created, all access for the user must be removed automatically. The security team must then receive a notification to approve the user. The company has a multi-Region AWS CloudTrail trail in the AWS account. Which combination of steps will meet these requirements? (Choose three.)

Accepted Answer

Correct answer: A, D, E. The correct answer is A, D, E. Option A: Create an Amazon EventBridge (Amazon CloudWatch Events) rule. Define a pattern with the detail-type value set to AWS API Call via CloudTrail and an eventName of CreateUser. Option D: Invoke an AWS Step Functions state machine to remove access. Option E: Use Amazon Simple Notification Service (Amazon SNS) to notify the security team. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS Step Functions coordinates multi-step workflows as a managed state machine.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 117