DOP-C02 Question 299
Select 3Your company runs a multi-account AWS environment, and you have been tasked with designing a solution to centralize event monitoring and processing. The goal is to detect operational issues across all accounts in near real-time and trigger automated workflows to remediate them. Which combination of AWS services should you use to achieve this?
- A
Amazon EventBridge for event routing and AWS Lambda for automated workflows
- B
AWS CloudTrail to log API activity and EventBridge to process events
- C
AWS Health for operational issue notifications and EventBridge for rule-based routing
- D
Amazon SNS to publish events and AWS Lambda to process them
- E
AWS Config to detect changes in resource configurations and EventBridge to trigger workflows
Show answer and explanation
Correct answers: A, B, C
Explanation
Centralizing event monitoring across a multi-account AWS environment requires services that can capture, process, and route events effectively. Amazon EventBridge is the primary service for event routing and integration with other AWS services. AWS CloudTrail is a critical source of API activity events, while AWS Health provides operational issue notifications. Together, these services enable near real-time detection and remediation of issues.
- A. Correct.
Correct: Amazon EventBridge is designed for routing events from multiple AWS accounts and services, and AWS Lambda can be used to trigger automated workflows for remediation.
- B. Correct.
Correct: AWS CloudTrail provides a log of API activity that can be used as an event source for EventBridge to process and route events.
- C. Correct.
Correct: AWS Health provides notifications about health events, and these can be routed through EventBridge to trigger workflows or alerts.
- D. Incorrect.
Incorrect: Amazon SNS is more suited for pub/sub messaging rather than centralized event processing. While it can publish events, it doesn't provide rule-based routing like EventBridge.
- E. Incorrect.
Incorrect: AWS Config is focused on detecting configuration changes, but it isn't primarily designed for centralizing and routing operational events across accounts.