Your DevOps team manages dozens of AWS accounts. Some of them belong to certain AWS Organizations and some do not. There is a new requirement to set up a CloudWatch rule in the master account whenever there is a new event of EC2 termination for any of the other accounts. You plan to set up a CloudWatch Events rule in each account and get the event sent to the default Event bus in the master account. Which condition is NOT mandatory for this solution to work?

Answer options:

A.Master account should permit the CloudWatch events to be received from other accounts.
B.All accounts should belong to certain AWS Organization.
C.A proper IAM role is needed for the sender account to send events to the Event bus in the master account.
D.In CloudWatch Events, in order to send the event to the master account, the target should be configured as “Event bus in another AWS account”.

Correct Answer – B
CloudWatch Event bus is a service to help send/receive CloudWatch events to/from other AWS accounts:
One thing to note is that the question asks for the option which is NOT a must.
Option A is incorrect: Because permission from the master account is required to receive events.
Option B is CORRECT: Because there is no need for all accounts to belong to AWS Organizations. When adding permissions in the Event bus, the user can choose AWS Account or Organization:
Option C is incorrect: The sender needs a suitable IAM role for CloudWatch Events rule to send the event.
Option D is incorrect: Because this is required to send the event to the default Event bus in another account.