You have many IAM users with the ability to create EC2 volumes. Most of the data your team works with is sensitive, so you would like to make sure all volumes are encrypted. How might you facilitate this requirement?
A) Create an AWS KMS policy and attach it to all IAM users that can create EC2 volumes.
B) Use AWS Config and create a rule that requires all volumes, upon creation, be encrypted.
C) Use AWS Config to send out reminders to IAM users every time they create an EC2 volume.
D) Set EC2 to notify creators to encrypt their EC2 volumes.

Question

Quizplus · Accepted Answer

AWS Config can be used to enforce compliance by creating a rule that ensures all EC2 volumes are encrypted upon creation.

You Have Many IAM Users with the Ability to Create