Question 8:

The firm requires that EC2 instances should not be accessible to the public via SSH, and the security group rules should be automatically modified to remove this access if it is detected.

What combination of steps?

Use AWS CloudTrail to monitor security group rule changes and send a notification to an Amazon SNS topic.

Use Amazon EventBridge to detect changes in security group rules and trigger an AWS Lambda function to modify the security groups

Implement an AWS Config rule to identify if security groups permit SSH from 0.0.0.0/0.

Set up an Amazon GuardDuty detector to monitor and alert if security groups allow SSH from 0.0.0.0/0.

Create an AWS Systems Manager Automation document to update the identified security group rules.

Learn: Nael Tests1