QuestionQ152
Network Security, Compliance, and GovernanceA company uses AWS Cloud WAN as its primary connectivity solution to enable communication among VPCs in a multi-account, multi-Region environment. The company has created an attachment-policy statement in the AWS Cloud WAN core network policy. The attachment policy requires approval for new VPC attachments, regardless of the segment with which each new VPC attachment must be associated.
The company wants to automate approval of new VPC attachments according to specific conditions. The company creates an AWS Lambda function to evaluate those conditions. A network engineer must integrate the Lambda function into the company’s existing architecture.
Which solution will satisfy these requirements in the MOST cost-effective manner?
- A Update the AWS Cloud WAN core network policy to create a network function group. Select the require acceptance option. Create a service insertion segment action that targets the Lambda function.
- B Create an Amazon EventBridge rule to match AWS Network Manager events for the VPC attachments. Configure the EventBridge rule to invoke the Lambda function when the rule matches.
- C Use Amazon CloudWatch logs to stream AWS CloudTrail logs to an Amazon Kinesis data stream. Configure an event source mapping to target the Lambda function to process the event stream.
- D Configure AWS Network Manager as a source for a pipe in Amazon EventBridge Pipes. Create a filter in the pipe for new VPC attachments. Set the Lambda function as the target of the pipe.
Community Discussion