Your company makes use of S3 buckets for storing data. There is a company policy that all services should have logging enabled. How can you ensure that logging is always enabled to create S3 buckets in the AWS Account?

Answer options:

A.Use AWS Inspector to inspect all S3 buckets and enable logging for those where it is not enabled.
B.Use AWS Config Rules to check whether logging is enabled for buckets.
C.Use AWS CloudWatch metrics to check whether logging is enabled for buckets.
D.Use AWS CloudWatch logs to check whether logging is enabled for buckets.

Answer: B
Option A is incorrect because AWS Inspector cannot be used to monitor S3 buckets.
Option B is CORRECT because you can add the AWS Config managed rule "S3_BUCKET_LOGGING_ENABLED" to your account to check whether your Amazon S3 buckets have logging enabled.
Options C and D are incorrect because CloudWatch cannot be used to check if logging is enabled for S3 buckets.
For more information on Config Rules, please see the below Link:
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html