nerdexam
Amazon

SAP-C02 · Question #627

A company needs to monitor a growing number of Amazon S3 buckets across two AWS Regions. The company also needs to track the percentage of objects that are encrypted in Amazon S3. The company needs…

The correct answer is C. Use the S3 Storage Lens default dashboard to track bucket and encryption metrics. Give the. To monitor S3 buckets across regions and track object encryption percentage for compliance with the least operational overhead, utilize the default Amazon S3 Storage Lens dashboard.

Submitted by the_admin· Mar 6, 2026Continuous Improvement for Existing Solutions

Question

A company needs to monitor a growing number of Amazon S3 buckets across two AWS Regions. The company also needs to track the percentage of objects that are encrypted in Amazon S3. The company needs a dashboard to display this information for internal compliance teams. Which solution will meet these requirements with the LEAST operational overhead?

Options

  • ACreate a new 3 Storage Lens dashboard in each Region to track bucket and encryption metrics.
  • BDeploy an AWS Lambda function in each Region to list the number of buckets and the encryption
  • CUse the S3 Storage Lens default dashboard to track bucket and encryption metrics. Give the
  • DCreate an Amazon EventBridge rule to detect AWS CloudTrail events for S3 object creation.

How the community answered

(37 responses)
  • A
    8% (3)
  • B
    3% (1)
  • C
    73% (27)
  • D
    16% (6)

Why each option

To monitor S3 buckets across regions and track object encryption percentage for compliance with the least operational overhead, utilize the default Amazon S3 Storage Lens dashboard.

ACreate a new 3 Storage Lens dashboard in each Region to track bucket and encryption metrics.

While S3 Storage Lens can create custom dashboards, creating a separate dashboard for each region increases operational overhead and prevents a unified view, contradicting the 'least operational overhead' and centralized dashboard requirements.

BDeploy an AWS Lambda function in each Region to list the number of buckets and the encryption

Deploying custom AWS Lambda functions in each Region to gather and process S3 metrics would involve significant development, deployment, and ongoing maintenance, leading to high operational overhead compared to a managed service like S3 Storage Lens.

CUse the S3 Storage Lens default dashboard to track bucket and encryption metrics. Give theCorrect

Amazon S3 Storage Lens provides organization-wide visibility into S3 storage usage and activity, including metrics for object encryption, across multiple regions and accounts. The default dashboard aggregates these metrics, offering a pre-configured solution for compliance teams without requiring any additional setup or custom development, thus providing the least operational overhead.

DCreate an Amazon EventBridge rule to detect AWS CloudTrail events for S3 object creation.

An Amazon EventBridge rule reacting to CloudTrail events for S3 object creation tracks individual events but does not provide an aggregated dashboard view of the percentage of objects encrypted across all existing S3 inventory for compliance reporting.

Concept tested: Amazon S3 Storage Lens for centralized monitoring

Source: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens.html

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice