Câu 25: AWS Certified Database - Specialty

A company is running a two-tier ecommerce application in one AWS account. The web server is deployed using an Amazon RDS for MySQL Multi-AZ DB instance. A Developer mistakenly deleted the database in the production environment. The database has been restored, but this resulted in hours of downtime and lost revenue. Which combination of changes in existing IAM policies should a Database Specialist make to prevent an error like this from happening in the future? (Choose three.)

1. A. Grant least privilege to groups, users, and roles — đáp án hiện tại
2. B. Allow all users to restore a database from a backup that will reduce the overall downtime to restore the database
3. C. Enable multi-factor authentication for sensitive operations to access sensitive resources and API operations — đáp án hiện tại
4. D. Use policy conditions to restrict access to selective IP addresses — đáp án hiện tại
5. E. Use AccessList Controls policy type to restrict users for database instance deletion
6. F. Enable AWS CloudTrail logging and Enhanced Monitoring