CLF-C02 Question 129
Single answerYou are a cloud administrator responsible for ensuring the security of your AWS environment. You want to identify any potential security issues, such as overly permissive security group rules or unrotated IAM access keys. Which AWS service can provide you with security-related checks and recommendations to address these issues?
- A
AWS Trusted Advisor
- B
AWS CloudWatch
- C
AWS Config
- D
Amazon Macie
Show answer and explanation
Correct answer: A
Explanation
AWS Trusted Advisor is the correct service for identifying and addressing security issues in your AWS environment. It offers a variety of security checks, including identifying unsecure configurations, unrotated IAM access keys, and unrestricted security groups. Other services like AWS CloudWatch, AWS Config, and Amazon Macie are useful for specific purposes but do not provide the comprehensive security check features of Trusted Advisor.
- A. Correct.
AWS Trusted Advisor provides security-related checks, such as identifying overly permissive security group rules, unused IAM credentials, and more. It offers recommendations to help improve your security posture.
- B. Incorrect.
AWS CloudWatch is a monitoring service that collects metrics and logs from your AWS resources. While useful for performance and operational monitoring, it does not provide specific security-related recommendations.
- C. Incorrect.
AWS Config helps with compliance and resource configuration management by tracking resource changes, but it does not provide direct security recommendations like AWS Trusted Advisor.
- D. Incorrect.
Amazon Macie is a data security and data privacy service that specializes in discovering and protecting sensitive data. It does not provide general security checks across your AWS environment.