A company gives its employees limited rights to AWS. DevOps engineers have the ability to assume an administrator role. For tracking purposes, the security team wants to receive a near-real-time notification when the administrator role is assumed.
How should this be accomplished?
To track and receive near-real-time notifications when an administrator role is assumed, the best solution involves using Amazon EventBridge with AWS CloudTrail. You can create an EventBridge rule that detects the specific AWS API call events related to role assumption. When such an event is detected, the rule can trigger an AWS Lambda function, which then publishes a notification message to an Amazon SNS topic. This setup provides a seamless and efficient way to meet the security team's requirements for timely notifications.
---> D