SAP-C02 Question 110
Select 2A company operates multiple AWS accounts as part of its AWS Organization. They want to centralize operational event notifications from all member accounts into a single account for easier monitoring. The solution must ensure scalability and minimal administrative overhead. Which combination of steps should you recommend?
- A
Use AWS CloudTrail in each member account to log events and configure it to send logs to an S3 bucket in the central account.
- B
Set up Amazon EventBridge in each member account and create rules to forward events to an EventBridge event bus in the central account.
- C
Configure the central account's EventBridge event bus to accept events from all member accounts by setting up resource-based policies.
- D
Use AWS Config in all member accounts and aggregate compliance data into the central account.
- E
Enable AWS Organizations integration with Amazon EventBridge and automatically forward all events to the central account.
Show answer and explanation
Correct answers: B, C
Explanation
To centralize event notifications across multiple AWS accounts, Amazon EventBridge is the recommended service. Each member account can use EventBridge to define rules that forward events to the central account's EventBridge event bus. To enable this cross-account forwarding, the central account must configure resource-based policies on its event bus to accept events from the member accounts. This solution ensures scalability and minimal administrative overhead, making it suitable for multi-account setups.
- A. Incorrect.
Using AWS CloudTrail to log events and send them to an S3 bucket is useful for audit and compliance purposes but does not provide real-time event notifications or centralized event routing.
- B. Correct.
Setting up Amazon EventBridge in each member account and creating rules to forward events to a central EventBridge event bus is a scalable and effective way to centralize event notifications.
- C. Correct.
Configuring the central account's EventBridge event bus to accept events from all member accounts using resource-based policies is necessary to allow cross-account event forwarding.
- D. Incorrect.
AWS Config aggregates compliance data but is not suitable for real-time event notifications or centralized routing of operational events.
- E. Incorrect.
AWS Organizations does not provide an automatic integration with EventBridge for forwarding events across accounts. Event forwarding must be explicitly configured using EventBridge rules and policies.