Exam AWS Certified Solutions Architect - Professional topic 1 question 430 discussion

A: There is a possibility that the event may be missed using this method. Amazon S3 event notifications typically deliver events in seconds but can sometimes take a minute or longer. On very rare occasions, events might be lost. https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html B: This actively remediate the public access. https://aws.amazon.com/blogs/security/how-to-detect-and-automatically-remediate-unintended-permissions-in-amazon-s3-object-acls-with-cloudwatch-events/ C: This is possible but not complete. This Trusted Advisor check doesn't monitor for bucket policies that override bucket ACLs. https://aws.amazon.com/premiumsupport/knowledge-center/secure-s3-resources/ https://aws.amazon.com/premiumsupport/technology/trusted-advisor/best-practice-checklist/#security https://willhamill.com/2018/02/19/get-alerts-when-an-s3-bucket-is-made-public-in-your-aws-account D: https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/log-s3-data-events.html E: Not feasible.

b,d https://aws.amazon.com/blogs/security/how-to-detect-and-automatically-remediate-unintended-permissions-in-amazon-s3-object-acls-with-cloudwatch-events/

B D it's good

A is not correct, the permission can't be detected by event notification. Event format is here:https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-content-structure.html

I will go with BD

demand of this 'How can the existence of a public S3 item be recognized' mean D & not C

B&C ; https://aws.amazon.com/about-aws/whats-new/2018/02/aws-trusted-advisors-s3-bucket-permissions-check-is-now-free/

It's B D

B and D Amazon CloudWatch Events to detect PutObject and PutObjectAcl API calls in near real time and helps ensure that the objects remain private by making automatic PutObjectAcl calls, when necessary.

I'll go with B,D

Any Thought on A,D many peoples referring as "On very rare occasions, events might be lost" to rule out A on https://docs.aws.amazon.com/AmazonS3/latest/userguide/NotificationHowTo.html I don't found event might be lost Important Amazon S3 event notifications are designed to be delivered at least once. Typically, event notifications are delivered in seconds but can sometimes take a minute or longer.

Definitely BD

will go with B&D

BD are the right ones

I'll go with BD

Correct is BD.

I'll go with B,D