nerdexam
Amazon

SCS-C02 · Question #76

A company's security engineer must record when specific AWS Lambda functions are invoked. The logs must include the AWS principal that invoked the function. External sources and the company's…

The correct answer is C. Modify the existing CloudTrail trail. Configure the existing CloudTrail trail to monitor Lambda. AWS CloudTrail Lambda data events can be used to detect and automatically act on invocations of Lambda functions across your AWS account. https://aws.amazon.com/blogs/mt/gain-visibility-into-the-execution-of-your-aws-lambda-functions- with-aws-cloudtrail/

Submitted by salim_om· Mar 6, 2026Security Logging and Monitoring

Question

A company's security engineer must record when specific AWS Lambda functions are invoked. The logs must include the AWS principal that invoked the function. External sources and the company's developers deliver the Lambda function code by using a variety of languages such as Python, Node.js, and Golang. The security engineer has created an AWS CloudTrail trail with default configuration for the AWS account. Which solution will meet these requirements with the LEAST operational overhead?

Options

  • AUpdate the Lambda function code to extract the AWS principal from the Lambda context and to
  • BUse Amazon EventBridge (Amazon CloudWatch Events) to configure a rule and custom pattern
  • CModify the existing CloudTrail trail. Configure the existing CloudTrail trail to monitor Lambda
  • DCreate a Lambda layer that provides CloudTrail with a log event that includes the Lambda context

How the community answered

(19 responses)
  • A
    5% (1)
  • B
    11% (2)
  • C
    74% (14)
  • D
    11% (2)

Explanation

AWS CloudTrail Lambda data events can be used to detect and automatically act on invocations of Lambda functions across your AWS account. https://aws.amazon.com/blogs/mt/gain-visibility-into-the-execution-of-your-aws-lambda-functions- with-aws-cloudtrail/

Topics

#CloudTrail#Lambda data events#audit logging#execution principal

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice