Table of Contents

1. Challenge

   Create AWS Config Rule

   Create AWS Config Rule:

   1. Create an S3 bucket for AWS Config (the default name is fine)
   2. Choose role for AWS Config to send data to S3
   3. Use search box and type in SSH
   4. Choose the restricted-ssh Rule
   5. Review and confirm
2. Challenge

   Create SNS Topic

   • Create SNS Topic:
     1. Create topic
     2. Add name: mytopic
   • Create SNS Subscription:
     1. For Protocol select Email
     2. Add your personal email address
     3. Click Confirm Subscription
     4. Go to your email account
     5. Confirm your SNS subscription
3. Challenge

   Create Lambda Function

   • Create Lambda function:
     1. Click Create Function
     2. Add name: remediatesg
     3. Choose Python 3.6, 3.7, or later
     4. Choose existing IAM role
     5. Click Create Function
     6. Delete provided function code
     7. Use the GitHub link and copy the function code, then paste it into the Lambda console function code box
     8. Click Save

   Note: If AWS Config has trouble detecting changes after a reasonable amount of time, go into AWS Config Settings and toggle it off and on again.

4. Challenge

   Create CloudWatch Rule

   • CloudWatch Events is now EventBridge. You'll be able to now create rules in Amazon EventBridge Event Rules.
     1. Click into Rules in left navigation
     2. Click Create Rule
     3. Select Schedule not Event
     4. Add 1 minute
     5. Select Target, add Lambda Function remediates
     6. Click Create rule