SAP-C02 Question 111
Single answerAn organization has multiple AWS accounts under a single AWS Organizations setup. They want to centralize event notifications from all member accounts and analyze them in a single account. What is the most appropriate solution to achieve this using AWS services?
- A
Configure Amazon EventBridge in each member account to forward events to a central EventBridge event bus in the management account.
- B
Use AWS CloudTrail in each member account to log events and then transfer the logs to a central S3 bucket in the management account.
- C
Set up AWS Config in each member account and aggregate the configuration changes in a central Config aggregator in the management account.
- D
Deploy an Amazon SNS topic in the management account and configure each member account to publish events to this topic.
Show answer and explanation
Correct answer: A
Explanation
To centralize event notifications from multiple AWS accounts, Amazon EventBridge is the most appropriate service. It allows you to configure event buses in member accounts to forward events to a central event bus in the management account. This enables centralized event processing and analysis. Other options like AWS CloudTrail, AWS Config, and Amazon SNS do not offer the required functionality for real-time multi-account event notification centralization.
- A. Correct.
This is the correct solution. Amazon EventBridge supports cross-account event bus routing, allowing you to forward events from member accounts to a central event bus in the management account for centralized processing.
- B. Incorrect.
While AWS CloudTrail provides a way to log and transfer event data to a central S3 bucket, it is intended for logging API activity, not real-time event notifications. This does not fulfill the requirement for centralized event notifications.
- C. Incorrect.
AWS Config is used for configuration tracking and compliance monitoring, not event notifications. Aggregators in AWS Config are for compliance summaries and do not handle real-time event notifications.
- D. Incorrect.
Amazon SNS is a messaging service and does not natively support forwarding events across multiple accounts. It is not designed for centralizing event notifications from multiple AWS accounts.