Apply | AWS Practice

Choose one answer

A security team needs a normalized view of findings from supported AWS security services across member accounts, plus near-real-time routing of selected findings to its incident workflow. Which design best fits?

Send application logs from every account to one EC2 instance and inspect them manually.Enable GuardDuty in one account and assume it scans every service and member account.Use a delegated Security Hub administrator with organization and Regional coverage, integrate supported finding sources, and route matching findings through EventBridge.Use CloudTrail log file validation as the security findings dashboard.