Your company has defined a number of EC2 Instances. They want to know if any of the security groups allow unrestricted access to a resource. Which of the following provides the SIMPLEST solution to accomplish the requirement?

Answer options:

A.Use AWS Inspector to inspect all the security Groups
B.Use the AWS Trusted Advisor to see which security groups have compromised access.
C.Use AWS Config to see which security groups have compromised access.
D.Use the AWS CLI to query the security groups and then filter for the rules which have unrestricted access

Answer is B
Option A is incorrect because AWS Inspector is used for detecting security vulnerabilities in an instance and not for security groups.
Option B is CORRECT because AWS Trusted Advisor can check security groups for rules that allow unrestricted access to a resource. 
Option C is incorrect because AWS Config is used to detect changes in security groups but not show you security groups that have compromised access.
Option D is incorrect since it offers a partially correct solution and also would create a maintenance overhead with additional filtering activities.
Below snapshot provides an overview of AWS Trusted Advisor and the details it provides with regards to your AWS account.
For more information on the AWS Trusted Advisor, please visit the below URL:
https://aws.amazon.com/premiumsupport/trustedadvisor/best-practices/