A company needs to log object-level activity in its Amazon S3 buckets. The company also needs to validate the integrity of the log file by using a digital signature. Which solution will meet these…

The correct answer is A. Create an AWS CloudTrail trail with log file validation enabled. Enable data events. Specify. Enabling AWS CloudTrail with log file validation and data events for Amazon S3 provides object- level logging for S3 buckets and ensures log file integrity through digital signatures. CloudTrail data events capture detailed records of object-level activity, such as read and…

Submitted by rachelw· Mar 6, 2026Logging and Monitoring

Question

A company needs to log object-level activity in its Amazon S3 buckets. The company also needs to validate the integrity of the log file by using a digital signature. Which solution will meet these requirements?

Options

ACreate an AWS CloudTrail trail with log file validation enabled. Enable data events. Specify
BCreate a new S3 bucket for S3 server access logs. Configure the existing S3 buckets to send
CCreate an Amazon CloudWatch Logs log group. Configure the existing S3 buckets to send their
DCreate a new S3 bucket for S3 server access logs with log file validation enabled. Enable data

How the community answered

(52 responses)

A
81% (42)
B
6% (3)
C
12% (6)
D
2% (1)

Explanation

Enabling AWS CloudTrail with log file validation and data events for Amazon S3 provides object- level logging for S3 buckets and ensures log file integrity through digital signatures. CloudTrail data events capture detailed records of object-level activity, such as read and write operations, in S3 buckets. By enabling log file validation, CloudTrail adds a digital signature to each log file, allowing you to verify its integrity.

Topics

#CloudTrail log validation#S3 data events#digital signature#log integrity

Community Discussion

No community discussion yet for this question.

Full SCS-C03 Practice