AWS Certified Solutions Architect Professional SAP-C02 Practice Question

The most scalable approach is to centralize events with Amazon EventBridge:

1. In the management account, create a custom EventBridge event bus (or use the default bus) and attach a resource-based policy that grants events:PutEvents to the entire AWS Organization (using the aws:PrincipalOrgID condition).
2. Use AWS CloudFormation StackSets with service-managed permissions to deploy, into every current and future member account, an EventBridge rule that:
   • Matches the source value aws.trustedadvisor and the detail-type value Trusted Advisor Check Item Refresh Notification.
   • Filters for detail.status equal to ERROR or WARN and the two specific check names.
   • Forwards matching events to the central event bus in the management account (target type Event bus).
3. In the management account, create an EventBridge rule on the central bus that triggers an AWS Lambda function. The function:
   • Parses the event, looks up the business unit's Slack webhook from a DynamoDB table, and posts a formatted message to the correct Slack channel.

This architecture is event-driven (near real-time), centralized, and-because StackSets automatically deploy and update the forwarding rule in every account-avoids ongoing per-account configuration. Alternative options either require manual setup in each account, rely on polling the Support API, or use services (Cost Explorer, AWS Config) that do not emit the needed real-time events.