Comprehensive and Detailed Step-by-Step Explanation:
The company needsautomatic monitoringandnotificationsforsecurity violationsin Amazon Redshift clusters.
Option A:❌
Create an Amazon EventBridge rule that uses the Redshift clusters as the source. Create an AWS Lambda function to evaluate the Redshift cluster security configuration. Configure the Lambda function to notify the company of any violations of the security policies. Add the Lambda function as a target of the EventBridge rule.
EventBridgecan trigger actionsbased on events.
However, itdoes not track changesin Redshift security configurations.
Why not?AWS Configis bettersuited forcompliance monitoring.
[Reference:Amazon EventBridge, , Option B:❌, Create an AWS Lambda function to check the validity of the Redshift cluster security configurations. Create an Amazon EventBridge rule that invokes the Lambda function when Redshift clusters are created. Notify the company of any violations of security policies., Explanation:, This solutiononly checks security at cluster creation., Itdoes not detect changesthat happenafter the cluster is created., Why not?Security policiesneed continuous monitoring., Reference:EventBridge Rules, , Option C:❌, Set up Amazon Redshift Advisor in the company's AWS account to monitor cluster configurations. Configure Redshift Advisor to generate notifications for security items that the company must address., Explanation:, Redshift Advisorprovides performance tuning recommendationsbutdoes not monitor security settings., Why not?Itdoes not provide compliance checks., Reference:Amazon Redshift Advisor, , Option D:✅, Create an AWS Lambda function to check the Redshift clusters for any violation of the security configurations. Create an AWS Config custom rule to invoke the Lambda function when Redshift cluster security configurations are modified. Provide the compliance state of each Redshift cluster to AWS Config. Configure AWS Config to notify the company of any violations of the security policies., Explanation:, AWS Configtracksconfiguration changesin Redshift clusters., Custom AWS Config rulesallowsecurity compliance enforcement., Lambdacan performcustom security checksand notify the company., Why is this best?AWS Config isdesigned for compliance monitoring., Reference:AWS Config for Security Compliance, , , ]
