SOA-C01 Exam Dumps : AWS Certified SysOps Administrator - Associate

Enable AWS Trusted Advisor and show the Security team that the Security Groups unrestricted access check will alarm.

Schedule an AWS Lambda function to run hourly to scan and evaluate all security groups, and send a report to the Security team.

Use AWS Config to enable the restricted-common-ports rule, and add port 80 to the parameters.

Use Amazon Inspector to evaluate the security groups during scans, and send the completed reports to the Security team.

Add Systems Manager permissions to the instance profile

Configure the bucket used by Session Manager logs to allow write access

install Systems Manager Agent on the instance

Modify the instance security group to allow inbound traffic on SSH port 22

Reboot the instance with a new SSH key pair named ssm-user

Copy the source region’s Amazon Machine Image (AMI) to the destination region and assign it the same ID.

Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.

Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS: :EC2: :AMI: :ImageID control.

Modify the AWS CloudFormation template by including the AMI IDs in the “Mappings” section. Refer to the proper mapping within the template for the proper AMI ID.