AWS Certified Security - Specialty SCS-C03

By Amazon · Question Mode

QuestionQ26

Detection

A company operates workloads in an AWS account. A security engineer notices unusual findings in Amazon GuardDuty. The security engineer needs to investigate a particular IAM role and create an investigation report. The report must include details of anomalous behavior and any indicators of compromise.

Which solution meets these requirements?

Explanation

Amazon Detective can run an investigation for an IAM role and generate an investigation report. The report details anomalous behavior that can indicate potential compromise and includes indicators of compromise, making it appropriate for investigating suspicious GuardDuty-related activity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!