Amazon
SCS-C02 · Question #181
An AWS Lambda function was misused to alter data, and a security engineer must identify who invoked the function and what output was produced. The engineer cannot find any logs created by the Lambda…
The correct answer is A. The execution role for the Lambda function did not grant permissions to write log data to. See the full explanation below for the reasoning.
Submitted by skyler.x· Mar 6, 2026Security Logging and Monitoring
Question
An AWS Lambda function was misused to alter data, and a security engineer must identify who invoked the function and what output was produced. The engineer cannot find any logs created by the Lambda function in Amazon CloudWatch Logs. Which of the following explains why the logs are not available?
Options
- AThe execution role for the Lambda function did not grant permissions to write log data to
- BThe Lambda function was invoked by using Amazon API Gateway, so the logs are not stored in
- CThe execution role for the Lambda function did not grant permissions to write to the Amazon S3
- DThe version of the Lambda function that was invoked was not current.
How the community answered
(28 responses)- A93% (26)
- C4% (1)
- D4% (1)
Topics
#AWS Lambda#CloudWatch Logs#IAM Permissions#Logging
Community Discussion
No community discussion yet for this question.