A security engineer is configuring a mechanism to send an alert when three or more failed sign-in attempts to the AWS Management Console occur during a 5-minute period. The security engineer creates a trail in AWS CloudTrail to assist in this work.
Which solution will meet these requirements?
The correct answer is B. Configure CloudTrail to send events to Amazon CloudWatch Logs. Create a metric filter for the relevant log group. Create a filter pattern with eventName matching ConsoleLogin and errorMessage matching ''Failed authentication''. Create a CloudWatch alarm with a threshold of 3 and a period of 5 minutes.
The other options are incorrect because:
Justa
23 days agoAleta
24 days agoMable
25 days agoGeorgene
6 days agoViva
7 days agoElfrieda
8 days agoHeike
9 days agoOcie
10 days agoFabiola
11 days agoLon
26 days ago