Which THREE of the following are best practices for securing an SAP system on AWS? (Choose THREE.)
Trap 1: Use the same security group for all SAP instances
Different tiers should have different security groups.
Trap 2: Store SAP license keys in a public S3 bucket
License keys are sensitive; they should not be public.
- A
Enable CloudTrail to log API calls for auditing
Auditing is a security best practice.
- B
Use AWS Key Management Service (KMS) to encrypt EBS volumes
Encryption at rest is a security best practice.
- C
Use the same security group for all SAP instances
Why wrong: Different tiers should have different security groups.
- D
Store SAP license keys in a public S3 bucket
Why wrong: License keys are sensitive; they should not be public.
- E
Restrict network access using security groups and network ACLs
Network segmentation is key for security.