How can this concern be addressed without putting undue restrictions on users?
A. Email the findings of AWS Personal Health Dashboard to InfoSec daily
B. Activate an AWS Config rule to identify public buckets and alert InfoSec using Amazon SNS
C. Apply an IAM policy on all users that denies the action s3:PutBucketPolicy
D. Restrict S3 bucket access to specific IAM roles managed using federated access
Answer:B
How can this concern be addressed without putting undue restrictions on users?
A. Email the findings of AWS Personal Health Dashboard to InfoSec daily B. Activate an AWS Config rule to identify public buckets and alert InfoSec using Amazon SNS C. Apply an IAM policy on all users that denies the action s3:PutBucketPolicy D. Restrict S3 bucket access to specific IAM roles managed using federated access
Explanation: Using AWS config you can check whenever any S3 bucket make public.