Exam AWS Certified Developer Associate topic 1 question 396 discussion

Ans: D. Configure the permissions on the main account event bus to receive events from all accounts. Create an Amazon EventBridge rule in each account to send all the EC2 instance lifecycle events to the main account event bus. Add an EventBridge rule to the main account event bus that matches all EC2 instance lifecycle events. Set the SQS queue as a target for the rule.

For Option C using lambda does not seem to be a good solution as we would have to trigger lambda on some schedule and it will has less granularity in time. For D. Why would we be matching EC2 instance lifecycle events in Main account event bus and not in each account event bus and reducing overhead for main account

This solution uses resource policies to give permissions to all AWS accounts to write to the SQS queue in the main account. This way, EC2 instances in any account can send their lifecycle events to the SQS queue in the main account. Additionally, each account will have an EventBridge rule that matches all EC2 instance lifecycle events and sends them to the SQS queue in the main account. This solution meets the requirement of storing all the lifecycle events of EC2 instances from multiple accounts in a single Amazon SQS queue for further processing.

The best solution would be to use Amazon EventBridge and have each account deliver the EC2 instance lifecycle events to the EventBridge event bus of the main account. Then, set up a rule in the main account's event bus that matches all EC2 instance lifecycle events and set the SQS queue as a target for the rule. This solution provides a direct and efficient mechanism for collecting the EC2 instance lifecycle events and eliminates the need for a periodic scan by the Lambda function.

Configure Amazon EC2 to deliver the EC2 instance lifecycle events from all accounts to the Amazon EventBridge event bus of the main account. Add an EventBridge rule to the event bus of the main account that matches all EC2 instance lifecycle events. Add the SQS queue as a target of the rule. In order to meet the requirements, the developer can use the EventBridge service. By configuring Amazon EC2 to deliver the EC2 instance lifecycle events from all accounts to the EventBridge event bus of the main account, the developer can create an EventBridge rule in the main account that matches all EC2 instance lifecycle events and add the SQS queue as a target of the rule. This way, all the lifecycle events of the EC2 instances will be collected and stored in a single SQS queue in the main account for further processing.

I think it's D as well. All other options doesn't make sense.