A telecommunications company operates a secure Amazon Virtual Private Cloud (Amazon VPC) and must ensure that only authorized public IP addresses can be accessed from the application subnet. A network administrator has modified the route table linked to the application’s subnet to route traffic toward these public IP addresses through an internet gateway.
To enhance security, the company wants to implement email notifications whenever a user modifies the route table by adding a default route (0.0.0.0/0 or ::/0) that directs all outbound traffic through the internet gateway. Additionally, the company wants to ensure that only authorized AWS Identity and Access Management (IAM) users can modify the route table and receive an alert if an unauthorized user attempts to make changes.
Which approach will meet this requirement with minimal operational effort?
