A company is running a two-tier ecommerce application in one AWS account. The application is backed by an Amazon RDS for MySQL Multi-AZ DB instance. A developer mistakenly deleted the DB instance in the production environment. The company restores the database, but this event results in hours of downtime and lost revenue. Which combination of changes would minimize the risk of this mistake occurring in the future? (Choose three.)
A) Grant least privilege to groups, IAM users, and roles.
B) Allow all users to restore a database from a backup.
C) Enable deletion protection on existing production DB instances.
D) Use an ACL policy to restrict users from DB instance deletion.
E) Enable AWS CloudTrail logging and Enhanced Monitoring.

Question

Quizplus · Accepted Answer

Granting least privilege, enabling deletion protection, and enabling logging and monitoring helps minimize the risk of accidental deletion of production DB instances.

A Company Is Running a Two-Tier Ecommerce Application in One