A. Configure an RDS event notification subscription for DB security group events.
B. Create an AWS Lambda function that monitors DB security group changes. Create an Amazon Simple Notification Service (Amazon SNS) topic for notification.
C. Turn on AWS CloudTrail. Configure notifications for the detection of changes to DB security groups.
D. Configure an Amazon CloudWatch alarm for RDS metrics about changes to DB security groups.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.