A large IT company just hired you as a senior AWS DevOps engineer. You are supposed to provide a solution to notify the team appropriately when the status of Trusted Advisor checks has changed. For example, if the Cost Optimization checks in Trusted Advisor have just found a Low Utilization Amazon EC2 Instance, there should be a notification to a Slack channel so that the operation team can react to the status change and potentially optimize the cost. Which combinations of services should you use to meet this requirement? (Select TWO.)

Answer options:

A.In the Cost Optimization dashboard of Trusted Advisor, configure a notification to an SNS topic when the status check has found a new event.
B.In AWS CloudWatch Logs, create a metric filter for any new logs which contain “Check Item Refresh Status”.
C.Create a new CloudWatch Events rule. Add event source as "Trusted Advisor" and event type as "Check Item Refresh Status".
D.Create a new SNS topic that is in charge of providing customized notifications to the Slack channel.
E.Use a Lambda function to pass a customized notification to the Slack channel when check status in CloudWatch Event has changed.

Correct Answer – C, E
For this case, the best way is to monitor Trusted Advisor check results with a new Amazon CloudWatch Events rule. And the target for this rule would be a Lambda function that can design when and how to send notifications to the Slack channel. Details can be checked in https://docs.aws.amazon.com/awssupport/latest/user/cloudwatch-events-ta.html.
Option A is incorrect: Because there is no way to configure notifications in the Trusted Advisor Cost Optimization dashboard.
Option B is incorrect: Because Trusted Advisor does not provide logs to CloudWatch Logs. CloudWatch Events or Metrics should be considered instead.
Option C is CORRECT: Because CloudWatch Events can be used to detect and react to changes in the status of Trusted Advisor checks:
Option D is incorrect: Because SNS is not needed in this scenario. Besides, SNS cannot integrate with Slack directly. A Lambda function is still required. Refer to Option
E.Option E is CORRECT: Because a Lambda function can be configured as the target of the new CloudWatch Events rule: