QuestionQ12

Cloud Posture Security

A company has an Amazon S3 bucket that contains personally identifiable information (PII) and must determine whether the resource has any misconfigurations or is publicly exposed.

Based on the image below, which data source type should be investigated?

Question Image

  • A Amazon Web Services (AWS)
  • B Amazon CloudWatch
  • C Amazon S3
  • D Microsoft Azure
Explanation

The Amazon Web Services (AWS) cloud-service-provider source is the appropriate integration for evaluating configuration and exposure of AWS resources, including S3 buckets. Amazon S3 evaluates bucket public access through bucket policies, ACLs, and Block Public Access settings; the AWS source provides the cloud-resource context needed to investigate those conditions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!