An Amazon Redshift database contains sensitive user data. Logging is necessary to meet compliance requirements. The logs must contain database authentication attempts, connections, and…

Question

Options

• AEnable Amazon Redshift Enhanced VPC Routing. Enable VPC Flow Logs to monitor traffic.
• BAllow access to the Amazon Redshift database using AWS IAM only. Log access using AWS
• CEnable audit logging for Amazon Redshift using the AWS Management Console or the AWS CLI.
• DEnable and download audit reports from AWS Artifact.

• B
  4% (1)
• C
  92% (22)
• D
  4% (1)

Explanation

Enabling Amazon Redshift audit logging (Option C) is the correct solution. Redshift audit logging produces three types of logs: the Connection Log (records authentication attempts, connections, and disconnections), the User Log (records changes to database user definitions), and the User Activity Log (records every SQL query executed and identifies which user ran it). These directly satisfy all stated compliance requirements. Option A uses VPC Flow Logs, which capture IP-level network traffic but contain no SQL query or user-level details. Option B relies on AWS CloudTrail for IAM API calls, which does not log individual SQL queries executed inside the database. Option D - AWS Artifact - provides compliance documentation and audit reports for AWS services themselves, not runtime database activity logs.

No community discussion yet for this question.