You are working as a SysOps architect for a media firm. All news footage files are uploaded in S3 buckets. To archive old video footage, you set S3 Lifecycle policies to move these files to STANDARD_IA after 30 days & to S3 Glacier vaults after 90 days. For all compliance & audit requirements, you are looking for a tool to gather records across all regions. Which of the following can be used to evaluate AWS Glacier vaults? Choose 2 options.

Answer options:

A.Enable Audit logging on Amazon S3 Glacier with AWS CloudTrail.
B.Create an AWS Config Custom rule & assign a Lambda function to this rule.
C.Create an AWS Config Managed rule & assign a Lambda function to this rule.
D.Create a Lambda function to evaluate AWS S3 Glacier Vault.

Correct Answers: B and D
AWS Config doesn`t currently record Amazon S3 Glacier vaults. You can create custom rules to run evaluations for resource types not yet recorded by AWS Config. To create a custom rule, you first create an AWS Lambda function, which contains the evaluation logic for the rule. Then you associate the function with a custom rule that you create in AWS Config.
Option A is incorrect Enabling Audit logging on Amazon S3 Glacier with AWS CloudTrail will record actions taken by a user, role, or an AWS service in Glacier.
Option C is incorrect AWS Config managed rules are predefined, customizable rules that AWS Config uses to evaluate whether your AWS resources comply with common best practices. Currently, S3 Glaciers is not supported by these rules.
For more information on custom AWS config rules with Lambda function, check the following link-
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules_nodejs.html
https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html