DBS-C01 · Question #75
A marketing company is using Amazon DocumentDB and requires that database audit logs be enabled. A Database Specialist needs to configure monitoring so that all data definition language (DDL)…
The correct answer is A. Enable DocumentDB to export the logs to Amazon CloudWatch Logs. https://docs.aws.amazon.com/documentdb/latest/developerguide/event-auditing.html Step 2. Enable Amazon CloudWatch Logs Export When the value of the audit_logs cluster parameter is enabled, you must also enable Amazon DocumentDB to export logs to Amazon CloudWatch. If you omit…
Question
A marketing company is using Amazon DocumentDB and requires that database audit logs be enabled. A Database Specialist needs to configure monitoring so that all data definition language (DDL) statements performed are visible to the Administrator. The Database Specialist has set the audit_logs parameter to enabled in the cluster parameter group. What should the Database Specialist do to automatically collect the database logs for the Administrator?
Options
- AEnable DocumentDB to export the logs to Amazon CloudWatch Logs
- BEnable DocumentDB to export the logs to AWS CloudTrail
- CEnable DocumentDB Events to export the logs to Amazon CloudWatch Logs
- DConfigure an AWS Lambda function to download the logs using the download-db-log-file-portion
How the community answered
(42 responses)- A83% (35)
- B10% (4)
- C2% (1)
- D5% (2)
Explanation
https://docs.aws.amazon.com/documentdb/latest/developerguide/event-auditing.html Step 2. Enable Amazon CloudWatch Logs Export When the value of the audit_logs cluster parameter is enabled, you must also enable Amazon DocumentDB to export logs to Amazon CloudWatch. If you omit either of these steps, audit logs will not be sent to CloudWatch. Do not get confused with "Amazon DocumentDB records Data Definition Language (DDL), authentication, authorization, and user management events to Amazon CloudWatch Logs." The above event start to get recorded when you enable auditing via enabling audit_log parameter.
Topics
Community Discussion
No community discussion yet for this question.