Question

A company keeps a large volume of data in Amazon S3 buckets across multiple AWS Regions and multiple AWS accounts. The company uses an AWS Organizations organization with all features enabled to manage those AWS accounts. A DevOps engineer must deliver an overview of potential security risks associated with the data stored in the S3 buckets. The company must be able to review the findings from one central location. Which solution meets these requirements in the **MOST** operationally efficient manner?

Accepted Answer

B. Configure an account as the delegated Amazon Macie administrator account in the organization. Enable Macie in each Region in the delegated administrator account. Enable automated discovery and configure AWS Security Hub to perform cross-Region aggregation.

Answer

Enable Amazon Macie in each AWS account and Region. Enable automated discovery and configure custom data identifiers. In each account, designate a central Region and configure AWS Security Hub to perform cross-Region aggregation.

Answer

Designate an account as a central Amazon Macie administrator account and enable Macie in each Region. Send and accept a Macie membership request in each account in the organization. Configure AWS Security Hub to perform cross-Region aggregation in the administrator account.

Answer

Activate Amazon Macie in each Region in each AWS account and enable automated discovery. Designate a Macie administrator account. Send and accept membership invitations in all other accounts. In the administrator account, activate AWS Security Hub in each Region.