DOP-C02 Question 301
Select 3Your company is running a multi-account AWS environment with centralized monitoring and incident handling. To ensure proactive responses to critical events, you need to design a solution that captures operational issues such as AWS service outages, unauthorized API calls, and scheduled maintenance updates, and routes them to your incident response team via an Amazon SNS topic. Which of the following combination of services can be used to achieve this?
- A
Amazon EventBridge for capturing AWS Health events and routing them to an SNS topic
- B
AWS CloudTrail for capturing unauthorized API calls and routing them to an SNS topic
- C
AWS Health Dashboard for monitoring AWS service outages and sending notifications to an SNS topic
- D
Amazon EventBridge for forwarding scheduled maintenance events from AWS Health to an SNS topic
- E
AWS Config for monitoring compliance violations and triggering notifications to an SNS topic
Show answer and explanation
Correct answers: A, B, D
Explanation
A combination of Amazon EventBridge and AWS CloudTrail allows you to capture and process key operational events such as AWS Health updates, unauthorized API calls, and scheduled maintenance events. EventBridge is particularly effective for integrating with AWS Health and routing these events to an SNS topic, while CloudTrail is essential for tracking API activity, including security-related incidents. AWS Config and the AWS Health Dashboard are not suitable for this scenario as they do not directly generate or route the required events to SNS topics.
- A. Correct.
Amazon EventBridge is ideal for capturing AWS Health events, such as service outages and maintenance updates, and routing them to an SNS topic for further processing. This is a correct option.
- B. Correct.
AWS CloudTrail captures API activity, including unauthorized API calls. These events can be forwarded to an SNS topic for alerting. This is a correct option.
- C. Incorrect.
The AWS Health Dashboard provides a visual interface for monitoring AWS service outages and maintenance events, but it does not directly integrate with SNS for notifications. This is an incorrect option.
- D. Correct.
Amazon EventBridge can forward maintenance events from AWS Health to an SNS topic, enabling proactive communication for scheduled downtimes. This is a correct option.
- E. Incorrect.
AWS Config is used for compliance and configuration monitoring, not for capturing operational events like AWS Health updates or unauthorized API calls. This is an incorrect option.