SAP-C02 · Question #353
A company has a new security policy. The policy requires the company to log any event that retrieves data from Amazon S3 buckets. The company must save these audit logs in a dedicated S3 bucket. The…
The correct answer is D. Enable AWS CloudTrail, and use the audit logs S3 bucket to store logs. Enable data event. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/best-practices-security.html
Question
A company has a new security policy. The policy requires the company to log any event that retrieves data from Amazon S3 buckets. The company must save these audit logs in a dedicated S3 bucket. The company created the audit logs S3 bucket in an AWS account that is designated for centralized logging. The S3 bucket has a bucket policy that allows write-only cross-account access. A solutions architect must ensure that all S3 object-level access is being logged for current S3 buckets and future S3 buckets. Which solution will meet these requirements?
Options
- AEnable server access logging for all current S3 buckets. Use the audit logs S3 bucket as a
- BEnable replication between all current S3 buckets and the audit logs S3 bucket. Enable S3
- CConfigure S3 Event Notifications for all current S3 buckets to invoke an AWS Lambda function
- DEnable AWS CloudTrail, and use the audit logs S3 bucket to store logs. Enable data event
How the community answered
(34 responses)- A15% (5)
- B6% (2)
- C3% (1)
- D76% (26)
Explanation
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/best-practices-security.html
Community Discussion
No community discussion yet for this question.