CLF-C02 Practice Question 129: Report Resource Abuse
AWS Certified Cloud Practitioner (CLF-C02) · Test 13 · question 9 of 10
A company's website, which is not hosted on AWS, keeps receiving attack traffic and spam from IP addresses that belong to AWS. The company suspects that someone is using AWS resources for abusive purposes. How should the company report this to AWS?
Show answer and explanation
Answer:
Suspected abuse of AWS resources, such as attacks or spam coming from AWS IP addresses, is reported to the AWS Trust & Safety team through the Amazon AWS abuse form, or by email for automated reports. The report should include details such as the target IP address, timestamps with time zone and log samples showing the activity. Trust & Safety uses this information to investigate and try to resolve the incident, and it can ask the reporter for more information if needed.
Option B is wrong because partners help AWS customers build and run workloads. They have no authority over another customer's resources. Option C is wrong because AWS Config evaluates the configuration of resources in *your own* account and can't act on traffic coming from someone else's. Option D is wrong because GuardDuty detects threats to resources inside *your* AWS account. It can't block traffic aimed at a website hosted outside AWS.
Reference: How do I report abuse of AWS resources?