A SysOps administrator has enabled AWS CloudTrail in an AWS account If CloudTrail is disabled it must be re-enabled immediately What should the SysOps administrator do to meet these requirements WITHOUT writing custom code”

A SysOps administrator has enabled AWS CloudTrail in an AWS account If CloudTrail is disabled it must be re-enabled immediately What should the SysOps administrator do to meet these requirements WITHOUT writing custom code”
A . Add the AWS account to AWS Organizations Enable CloudTrail in the management account
B . Create an AWS Config rule that is invoked when CloudTrail configuration changes Apply the AWS-ConfigureCloudTrailLogging automatic remediation action
C . Create an AWS Config rule that is invoked when CloudTrail configuration changes Configure the rule to invoke an AWS Lambda function to enable CloudTrail
D . Create an Amazon EventBridge (Amazon CloudWatch Events) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail

View Answer

Answer: B

Explanation:

To ensure CloudTrail is re-enabled immediately if it is disabled, you can use AWS Config with an automatic remediation action.

Create AWS Config Rule:

Configure an AWS Config rule that triggers when there are changes to the CloudTrail configuration.

Reference: AWS Config Rules

Apply Automatic Remediation:

Use the AWS-ConfigureCloudTrailLogging automatic remediation action to re-enable CloudTrail if it is disabled.

Reference: AWS Config Remediation

This solution ensures compliance without the need for custom code.