AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 77

Question

A company maintains an open-source application that is hosted on a public GitHub repository. While creating a new commit to the repository, an engineer uploaded their AWS access key and secret access key. The engineer reported the mistake to a manager, and the manager immediately disabled the access key. The company needs to assess the impact of the exposed access key. A security engineer must recommend a solution that requires the least possible managerial overhead. Which solution meets these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Analyze a credential report in AWS Identity and Access Management (IAM) to see when the access key was last used. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Security - Specialty SCS-C02 — Question 77