SAA-C03 Q149 · Security

Question

An ecommerce company runs applications in AWS accounts that are part of an organization in AWS Organizations. The applications run on Amazon Aurora PostgreSQL databases across all the accounts. The company needs to prevent malicious activity and must identify abnormal failed and incomplete login attempts to the databases. What should a solutions architect do to meet these requirements?

Accepted Answer

**Option B: Enable Amazon RDS Protection in GuardDuty for member accounts** meets every requirement:

1. **Prevent malicious activity**: GuardDuty RDS Protection uses machine learning to profile and monitor login activity to Aurora databases. It detects potentially suspicious login behavior and generates security findings that can trigger automated responses.

2. **Identify abnormal failed and incomplete login attempts**: RDS Protection specifically monitors login events (both successful and failed) to Aurora databases. It establishes a baseline of normal behavior and then flags anomalies — such as brute-force attacks, login attempts from unusual IPs, or access from known threat actors.

3. **Aurora PostgreSQL support**: GuardDuty RDS Protection supports Aurora PostgreSQL (and Aurora MySQL

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips