SAP-C02 Question #627: Real Exam Question with Answer & Explanation

Question

A company needs to monitor a growing number of Amazon S3 buckets across two AWS Regions. The company also needs to track the percentage of objects that are encrypted in Amazon S3. The company needs a dashboard to display this information for internal compliance teams. Which solution will meet these requirements with the LEAST operational overhead?

Options

• ACreate a new 3 Storage Lens dashboard in each Region to track bucket and encryption metrics.
• BDeploy an AWS Lambda function in each Region to list the number of buckets and the encryption
• CUse the S3 Storage Lens default dashboard to track bucket and encryption metrics. Give the
• DCreate an Amazon EventBridge rule to detect AWS CloudTrail events for S3 object creation.

Explanation

To monitor S3 buckets across regions and track object encryption percentage for compliance with the least operational overhead, utilize the default Amazon S3 Storage Lens dashboard.

Common mistakes.

• A. While S3 Storage Lens can create custom dashboards, creating a separate dashboard for each region increases operational overhead and prevents a unified view, contradicting the 'least operational overhead' and centralized dashboard requirements.
• B. Deploying custom AWS Lambda functions in each Region to gather and process S3 metrics would involve significant development, deployment, and ongoing maintenance, leading to high operational overhead compared to a managed service like S3 Storage Lens.
• D. An Amazon EventBridge rule reacting to CloudTrail events for S3 object creation tracks individual events but does not provide an aggregated dashboard view of the percentage of objects encrypted across all existing S3 inventory for compliance reporting.

Concept tested. Amazon S3 Storage Lens for centralized monitoring

Reference. https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens.html

No community discussion yet for this question.