AWS Certified CloudOps Engineer - Associate SOA-C03

By Amazon · Question Mode

QuestionQ19

Security and Compliance

A CloudOps engineer is responsible for the security and compliance of a company's AWS account. To make sure the company's Amazon EC2 instances comply with company policy, the CloudOps engineer wants to terminate every EC2 instance that lacks a department tag. Noncompliant resources must be terminated near real time.

Which solution meets these requirements?

Explanation

The AWS Config required-tags managed rule supports AWS::EC2::Instance and identifies instances missing a configured tag key. Config rules can use automatic Systems Manager Automation remediation for noncompliant resources, and the AWS-TerminateEC2Instance runbook terminates the identified EC2 instance.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!