A company uses AWS Organizations to administer its AWS accounts. It has a development account and a production account. An auditor has asked for evidence that workloads in the production account can withstand disruptions. The company needs a solution that increases the resilience of every production-account workload.
Which solution meets these requirements?
A Use AWS Audit Manager to create a new assessment based on AWS Operational Best Practices in the production account. After the assessments are finished, provide the auditor with direct access to the reports. B Review the architecture by using the AWS Well-Architected Tool. Use the Well-Architected Framework and focus on the Operational Excellence, Security, and Reliability pillars. Document and implement mitigations for the identified risks. Provide the documentation to the auditor. C Use Amazon Inspector with a multi-account environment to assess the production account workloads for vulnerabilities. Create a CIS scan in Amazon Inspector. Configure the CIS scan as a one time scan with Benchmark Level 2. After the scan is finished, download the PDF report and provide the report to the auditor. D Use the AWS Fault Injection Service to create experiments in the development account for each workload. Adjust the configuration and architecture of the workloads to improve resilience. Run the experiments again. Download the PDF reports and provide the reports to the auditor. Show Answer Answer Explanation AWS Fault Injection Service performs controlled fault-injection experiments that simulate disruptive conditions so teams can observe workload behavior, uncover weaknesses, make configuration or architectural improvements, and validate those improvements with subsequent experiments. AWS recommends beginning this testing in a pre-production or test environment, and AWS FIS experiment reports are PDF documents intended to provide evidence of resilience testing.
Learn more
Community Discussion