SOA-C02 Question 188
Select 3You are a SysOps Administrator managing an AWS environment that has recently undergone a security audit. The audit report highlights potential security risks in your account, including IAM users with no MFA enabled, overly permissive IAM policies, and exposed S3 buckets. Which AWS Trusted Advisor security checks should you review to address these issues?
- A
MFA on Root Account
- B
Security Groups - Specific Ports Unrestricted
- C
S3 Bucket Permissions
- D
IAM Access Key Rotation
- E
Overly Permissive IAM Policies
Show answer and explanation
Correct answers: A, C, E
Explanation
AWS Trusted Advisor provides a set of security checks to help identify potential risks in your AWS account. To address the audit findings, you can use the 'MFA on Root Account' check to ensure MFA is enabled on the root user account, the 'S3 Bucket Permissions' check to identify publicly accessible buckets, and the 'Overly Permissive IAM Policies' check to detect overly broad IAM permissions. These checks align directly with the identified security risks.
- A. Correct.
Trusted Advisor provides a security check for MFA on the root account to ensure that the root account is secure, but it does not directly check MFA for all IAM users.
- B. Incorrect.
The 'Security Groups - Specific Ports Unrestricted' check identifies overly permissive security groups but does not address IAM policies or S3 bucket permissions.
- C. Correct.
The 'S3 Bucket Permissions' check identifies publicly accessible S3 buckets, which is directly relevant to addressing the audit finding of exposed S3 buckets.
- D. Incorrect.
The 'IAM Access Key Rotation' check ensures that access keys are rotated regularly but does not address MFA or overly permissive policies.
- E. Correct.
The 'Overly Permissive IAM Policies' check identifies IAM policies that are too permissive, making this relevant to the audit finding of overly permissive IAM policies.