A company needs to set up a centralized solution to audit API calls to AWS for workloads that run on AWS services and non AWS services. The company must store logs of the audits for 7 years. Which sol

Question

Options

• ASet up a data lake in Amazon S3. Incorporate AWS CloudTrail logs and logs from non AWS
• BConfigure custom integrations for AWS CloudTrail Lake to collect and store CloudTrail events
• CEnable AWS CloudTrail for AWS services. Ingest non AWS services into CloudTrail to store the
• DCreate new Amazon CloudWatch Logs groups. Send the audit data from non AWS services to

• A
  11% (3)
• B
  78% (21)
• C
  7% (2)
• D
  4% (1)

Explanation

AWS CloudTrail Lakeis a fully managed service that allows the collection, storage, and querying ofCloudTrail eventsfor both AWS and non-AWS services. CloudTrail Lake can be customized to collect logs from various sources, ensuring a centralized audit solution. It also supports long-term storage, so logs can be retained for 7 years, meeting the compliance requirement. Option A (Data Lake): Setting up a data lake in S3 introduces unnecessary operational complexity compared to CloudTrail Lake. Option C (Ingest non-AWS services into CloudTrail): CloudTrail Lake is better suited for this task with less operational overhead. Option D (CloudWatch Logs): While CloudWatch can store logs, CloudTrail Lake is specifically designed for API auditing and storage.

No community discussion yet for this question.