AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 93

Question

A company uses infrastructure as code (IaC) to create AWS infrastructure. The company writes the code as AWS CloudFormation templates to deploy the infrastructure. The company has an existing CI/CD pipeline that the company can use to deploy these templates. After a recent security audit, the company decides to adopt a policy-as-code approach to improve the company's security posture on AWS. The company must prevent the deployment of any infrastructure that would violate a security policy, such as an unencrypted Amazon Elastic Block Store (Amazon EBS) volume. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create rule sets in AWS CloudFormation Guard. Run validation checks for CloudFormation templates as a phase of the CI/CD process. AWS CloudFormation provisions infrastructure as code repeatably.

AWS Certified Security - Specialty SCS-C02 — Question 93