SOA-C03 · Question #80
A company's CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs However, there…
The correct answer is A. The IAM policy that is attached to the IAM role for the flow log is missing the. To publish VPC flow logs to Amazon CloudWatch Logs, the IAM role used by the flow logs must have permissions such as logs:CreateLogGroup, logs:CreateLogStream, and logs:PutLogEvents. If the logs:CreateLogGroup permission is missing, CloudWatch Logs cannot create or write to the…
Question
A company's CloudOps engineer is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs However, there are no logs in CloudWatch Logs. What could be blocking the VPC flow logs from being published to CloudWatch Logs?
Options
- AThe IAM policy that is attached to the IAM role for the flow log is missing the
- BThe IAM policy that is attached to the IAM role for the flow log is missing the
- CThe VPC is configured for IPv6 addresses.
- DThe VPC is peered with another VPC in the AWS account
How the community answered
(29 responses)- A76% (22)
- B7% (2)
- C3% (1)
- D14% (4)
Explanation
To publish VPC flow logs to Amazon CloudWatch Logs, the IAM role used by the flow logs must have permissions such as logs:CreateLogGroup, logs:CreateLogStream, and logs:PutLogEvents. If the logs:CreateLogGroup permission is missing, CloudWatch Logs cannot create or write to the log group, preventing the logs from appearing.
Topics
Community Discussion
No community discussion yet for this question.