A company has business-critical resources in an AWS account. It wants to receive an email notification whenever an AWS Management Console root-user sign-in event occurs in that account.
Which solution satisfies this requirement with the MOST operational efficiency?
A Create an Amazon CloudWatch alarm that detects AWS Management Console root user sign-in events. Configure the alarm to send email notifications directly through AWS Trusted Advisor. B Launch an Amazon EC2 instance. Schedule a script to run every hour to analyze AWS CloudTrail events. Configure the script to send email notifications to an Amazon SNS topic when AWS Management Console root user sign-in events occur. C Create an Amazon EventBridge rule that reacts to AWS Management Console root user sign-in events. Configure the rule to send email notifications to an Amazon SQS queue. D Create an Amazon EventBridge rule that reacts to AWS Management Console root user sign-in events. Configure the rule to send email notifications to an Amazon SNS topic. Show Answer Answer Explanation AWS CloudTrail records root-user console sign-ins as ConsoleLogin events, and Amazon EventBridge rules can react to AWS Management Console sign-in events delivered through CloudTrail. An EventBridge rule can publish matching events to an Amazon SNS topic, and an email address can subscribe to that topic to receive notifications. This is a fully managed, event-driven design with no polling infrastructure to operate.
Learn more
Community Discussion