You have enabled Cloudtrail logs for your company's AWS account. In addition, the IT Security department has mentioned that the logs need to be encrypted. How can this be achieved?

Question

Options

• AEnable SSL certificates for the Cloudtrail logs
• BThere is no need to do anything since the logs will already be encrypted
• CEnable Server side encryption for the trail
• DEnable Server side encryption for the destination S3 bucket

• A
  5% (3)
• B
  81% (47)
• C
  10% (6)
• D
  3% (2)

Explanation

The AWS Documentation mentions the following. By default CloudTrail event log files are encrypted using Amazon S3 server-side encryption (SSE). You can also choose to encryption your log files with an AWS Key Management Service (AWS KMS) key. You can store your log files in your bucket for as long as you want. You can also define Amazon S3 lifecycle rules to archive or delete log files automatically. If you want notifications about lo file delivery and validation, you can set up Amazon SNS notifications. Option A.C and D are not valid since logs will already be encrypted https://docs.aws.amazon.com/awscloudtrail/latest/usereuide/how-cloudtrail-works.html is: There is no need to do anything since the logs will already be encrypted

No community discussion yet for this question.