AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 117

Question

A company wants to be alerted through email when IAM CreateUser API calls are made within its AWS account. Which combination of actions should a SysOps administrator take to meet this requirement? (Choose two.)

Accepted Answer

Correct answer: A, D. The correct answer is A, D. Option A: Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS CloudTrail as the event source and IAM CreateUser as the specific API call for the event pattern. Option D: Use an Amazon Simple Notification Service (Amazon SNS) topic as an event target with an email subscription. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 117