EventBridge Security Rules Quiz

What you'll be asked

1. Which AWS service is primarily used to act as the 'central nervous system' for event-driven automation by routing events from AWS services to automated targets?
2. When configuring an EventBridge rule to detect unauthorized API calls, which JSON-based component is used to define the specific criteria that an event must meet to trigger the rule?
3. You want to automate the remediation of public S3 buckets. After an EventBridge rule detects a 'PutBucketPolicy' event, what is the best practice for executing the remediation logic?
4. If you are designing an EventBridge rule to trigger on security-sensitive events, which field in the CloudTrail event structure is most reliable for filtering actions performed by specific IAM users?
5. You have an EventBridge rule that triggers a Lambda function for security alerts. The rule is active and events are being generated in CloudTrail, but the Lambda function never executes. What is the most likely cause?

Answers and explanations come after you submit.