SCS-C02 Question 51
Select 3Your organization has multiple AWS accounts managed via AWS Organizations. Each account generates security findings in services like Amazon GuardDuty, AWS Security Hub, and AWS Config. To centralize and analyze these findings in a single account, which strategies should you implement?
- A
Set up AWS Security Hub in a designated master account and enable member accounts.
- B
Configure Amazon GuardDuty to forward findings to AWS CloudTrail for centralized logging.
- C
Use AWS Config Aggregators to aggregate compliance data across accounts.
- D
Enable AWS Security Hub findings aggregation across accounts using AWS Organizations.
- E
Manually export findings from each account to a centralized S3 bucket.
Show answer and explanation
Correct answers: A, C, D
Explanation
Centralizing security findings across multiple AWS accounts requires automated and scalable solutions like using AWS Security Hub and AWS Config Aggregators. AWS Security Hub integrates with AWS Organizations to aggregate findings across accounts into a master account, while AWS Config Aggregators consolidate compliance data. Manual exports are inefficient and not practical for large-scale operations, and forwarding GuardDuty findings to CloudTrail is not a supported use case for centralization.
- A. Correct.
Setting up AWS Security Hub in a master account and enabling member accounts allows findings to be aggregated and centralized from all linked accounts.
- B. Incorrect.
Amazon GuardDuty findings are not forwarded to AWS CloudTrail. CloudTrail is used for API activity tracking, not specifically for centralizing security findings.
- C. Correct.
AWS Config Aggregators allow compliance and configuration data to be aggregated from multiple accounts, aiding in centralized visibility.
- D. Correct.
AWS Security Hub supports findings aggregation across accounts using AWS Organizations, enabling a central view of all findings.
- E. Incorrect.
Manually exporting findings is not a scalable or automated strategy for centralizing security findings.