SCS-C02 · Question #218
AWS CloudTrail is being used to monitor API calls in an organization. An audit revealed that CloudTrail is failing to deliver events to Amazon S3 as expected. What initial actions should be taken to…
The correct answer is A. Verify thattheS3 bucket policy allows CloudTrail to write objects. D. Verify thattheS3 bucket defined in CloudTrail exists. To resolve CloudTrail's failure to deliver events to S3, verifying the S3 bucket policy for CloudTrail's write permissions (A) and ensuring the existence of the specified S3 bucket (D) are critical initial steps. These actions ensure that CloudTrail has the necessary…
Question
AWS CloudTrail is being used to monitor API calls in an organization. An audit revealed that CloudTrail is failing to deliver events to Amazon S3 as expected. What initial actions should be taken to allow delivery of CloudTrail events to S3? (Choose two.)
Options
- AVerify thattheS3 bucket policy allows CloudTrail to write objects.
- BVerify thattheIAM role used by CloudTrail has access to write to Amazon CloudWatch Logs.
- CRemove any lifecycle policies on the S3 bucket that are archiving objects to S3 Glacier Flexible
- DVerify thattheS3 bucket defined in CloudTrail exists.
- EVerify that the log file prefix defined in CloudTrail exists in the S3 bucket.
How the community answered
(42 responses)- A74% (31)
- B14% (6)
- C5% (2)
- E7% (3)
Explanation
To resolve CloudTrail's failure to deliver events to S3, verifying the S3 bucket policy for CloudTrail's write permissions (A) and ensuring the existence of the specified S3 bucket (D) are critical initial steps. These actions ensure that CloudTrail has the necessary permissions and a valid destination for log file delivery, addressing common configuration issues that can interrupt
Topics
Community Discussion
No community discussion yet for this question.