A company wants to standardize Amazon Elastic Block Store (Amazon EBS) volume encryption and minimize the cost and configuration effort to perform the volume encryption check. Which solution meets these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Create an AWS Config rule for Amazon EBS to evaluate whether a volume is encrypted and to flag volumes that are not encrypted..
Why this is the answer
The correct answer is to create an AWS Config rule. AWS Config continuously monitors and records AWS resource configurations, including EBS volume encryption status. It can automatically flag non-compliant resources, making it a cost-effective and low-effort solution for auditing encryption. The other options involve custom scripting (API calls with Lambda or Fargate), which requires more development and maintenance effort. While these could technically achieve the goal, they are less efficient and more costly than using AWS Config's built-in capabilities for compliance checks. The IAM policy and Cost Explorer option is irrelevant to enforcing encryption and focuses on tagging, not encryption status.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed