Question 482:
You are a DevOps engineer and you have an assignment to create a custom AWS Config rule to evaluate S3 buckets. This rule checks whether S3 bucket resources have suitable bucket policies and if a certain bucket becomes non-compliant, remediation actions should be triggered immediately to fix the bucket policy. You check the set of AWS recommended remediation actions but none of them are suitable for your case. How would you configure your custom remediation actions in the AWS Config rule?
Answer options:
A.Create a Lambda function to recover the bucket policy and in the AWS Config rule, select the Lambda function to perform the remediation action. B.Create an AWS CloudWatch Event rule to check the state change of the Config rule. Trigger a Lambda function to automatically recover the S3 bucket policy. C.Create a custom automation document in AWS Systems Manager Automation to fix the bucket policy. Select the automation document in the remediation action of the Config rule. D.Create a CloudFormation template to restore the S3 bucket policy and select the template in the AWS Config rule’s remediation action.
