A company wants to receive an email notification about critical findings in AWS Security Hub. The company does not have an existing architecture that supports this functionality.
Which solution will meet the requirement?
A company wants to receive an email notification about critical findings in AWS Security Hub. The company does not have an existing architecture that supports this functionality.
Which solution will meet the requirement?
To receive an email notification about critical findings in AWS Security Hub, create an Amazon EventBridge rule that detects these critical findings. Then, create an Amazon Simple Notification Service (SNS) topic as the target of the EventBridge rule. Finally, subscribe an email endpoint to the SNS topic to receive the published messages. This approach leverages AWS's event-driven architecture efficiently.
I think C is right. I dont believe SES can be the target for Eventbridge
To filter for critical only finding: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-cwe-all-findings.html
SecurityHub >>EventBridge >>SNS. { "source": ["aws.securityhub"], "detail-type": ["Security Hub Findings - Imported"], "detail": { "findings": {"Severity": {"Label": ["Critical"]}} } }
D - Eventbridge is essentially like SNS in this example -'Amazon Simple Notification Service (SNS) and Amazon EventBridge are both AWS services that help with data processing and messaging [of events.]' So then working directly with SMS is more efficient. And YES Eventbridge CAN work with SMS with just the same amount of effort but one less step of redundancy.
It´s not well architected. "C is better" The Way SecurityHub >>EventBridge >>SNS is better, option D suggests using Amazon SES directly, which is not the most straightforward or typical approach for this use case. EventBridge and SNS together offer a more integrated and native solution for sending notifications from AWS Security Hub.
C option.
Option C
EventBridge Rule -> SNS -> Email delivery
EventBridge -> SNS is right
C is right
C is right. confirmed
C is right securityhub > eventbridge > sns
C SES? Seriously?
Marked D is defenitely wrong
Exam on 2023-12-18
D. Indeed you can 'To subscribe an email address to an Amazon SNS topic using the AWS Management Console'
just C
C is soooo much quicker… no need for complicatedresources if all the administrator wants to find out who is responsibleand toalert them
SNS and eventbridge is the hint