[Networking and Content Delivery] A company wants to monitor the security groups of its Amazon EC2 instances to ensure that SSH is not open to the…

To monitor and automatically respond to security groups allowing SSH access:

AWS Config: This service can be used to detect security groups that allow SSH access publicly (Option

B). AWS Config continuously monitors and records your AWS resource configurations and allows you

to automate the evaluation of recorded configurations against desired configurations.

AWS Systems Manager Automation: This can automatically execute actions like closing the port

when a non-compliant security group is detected (Option D). It allows the execution of automated

workflows that can respond to Config rule findings, ensuring immediate remediation actions such as

closing ports. These two services combined offer a comprehensive solution to monitor, detect, and

rectify unwanted security group configurations automatically. AWS documentation on AWS Config

AWS Config and on Systems Manager Automation Systems Manager Automation provides additional

insights.