SCS-C02 · Question #76
A company's security engineer must record when specific AWS Lambda functions are invoked. The logs must include the AWS principal that invoked the function. External sources and the company's…
The correct answer is C. Modify the existing CloudTrail trail. Configure the existing CloudTrail trail to monitor Lambda. AWS CloudTrail Lambda data events can be used to detect and automatically act on invocations of Lambda functions across your AWS account. https://aws.amazon.com/blogs/mt/gain-visibility-into-the-execution-of-your-aws-lambda-functions- with-aws-cloudtrail/
Question
A company's security engineer must record when specific AWS Lambda functions are invoked. The logs must include the AWS principal that invoked the function. External sources and the company's developers deliver the Lambda function code by using a variety of languages such as Python, Node.js, and Golang. The security engineer has created an AWS CloudTrail trail with default configuration for the AWS account. Which solution will meet these requirements with the LEAST operational overhead?
Options
- AUpdate the Lambda function code to extract the AWS principal from the Lambda context and to
- BUse Amazon EventBridge (Amazon CloudWatch Events) to configure a rule and custom pattern
- CModify the existing CloudTrail trail. Configure the existing CloudTrail trail to monitor Lambda
- DCreate a Lambda layer that provides CloudTrail with a log event that includes the Lambda context
How the community answered
(19 responses)- A5% (1)
- B11% (2)
- C74% (14)
- D11% (2)
Explanation
AWS CloudTrail Lambda data events can be used to detect and automatically act on invocations of Lambda functions across your AWS account. https://aws.amazon.com/blogs/mt/gain-visibility-into-the-execution-of-your-aws-lambda-functions- with-aws-cloudtrail/
Topics
Community Discussion
No community discussion yet for this question.