SCS-C02 · Question #311
Your company has an EC2 Instance that is hosted in an AWS VPC. There is a requirement to ensure that logs files from the EC2 Instance are stored accordingly. The access should also be limited for the
The correct answer is B. Stream the log files to a separate Cloudwatch Log group D. Create an IAM policy that gives the desired level of access to the Cloudwatch Log group. You can create a Log group and send all logs from the EC2 Instance to that group. You can then limit the access to the Log groups via an IAM policy. Option A is invalid because Cloudtrail is used to record API activity and not for storing log files Option C is invalid because Clo
Question
Your company has an EC2 Instance that is hosted in an AWS VPC. There is a requirement to ensure that logs files from the EC2 Instance are stored accordingly. The access should also be limited for the destination of the log files. How can this be accomplished? Choose 2 answers from the options given below. Each answer forms part of the solution
Options
- AStream the log files to a separate Cloudtrail trail
- BStream the log files to a separate Cloudwatch Log group
- CCreate an IAM policy that gives the desired level of access to the Cloudtrail trail
- DCreate an IAM policy that gives the desired level of access to the Cloudwatch Log group
How the community answered
(43 responses)- A9% (4)
- B77% (33)
- C14% (6)
Explanation
You can create a Log group and send all logs from the EC2 Instance to that group. You can then limit the access to the Log groups via an IAM policy. Option A is invalid because Cloudtrail is used to record API activity and not for storing log files Option C is invalid because Cloudtrail is the wrong service to be used for this requirement * https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Workinj * https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/auth-and-access-control-
Topics
Community Discussion
No community discussion yet for this question.