AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 277

Question

A company wants to automate the creation of a security report. The company has an AWS Lambda function that gathers data from Amazon Inspector findings stored in AWS Security Hub in the us-west-2 Region. The Lambda function then needs to create a daily report by using an Amazon EventBridge schedule. A security engineer discovers that the Lambda function is failing to create the report. The security engineer must implement a solution that corrects the issue and provides least privilege permissions. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Attach the AWSSecurityHubReadOnlyAccess AWS managed policy to the Lambda function’s execution role. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

AWS Certified Security - Specialty SCS-C02 — Question 277