SCS-C02 Question 124
Select 3An organization wants to ensure that all critical AWS services are logging their activities centrally for auditing and security analysis. They also want to analyze the logs using Amazon Athena and retain them for compliance purposes. Which steps should the organization take to design and implement this logging solution?
- A
Enable AWS CloudTrail for all regions and configure it to deliver logs to an Amazon S3 bucket.
- B
Use Amazon CloudWatch Logs Insights to query and analyze the logs stored in Amazon S3.
- C
Configure AWS Config to deliver configuration change data to the same S3 bucket used for CloudTrail logs.
- D
Set up an S3 bucket with proper access policies to store the logs and enable S3 bucket versioning and encryption.
- E
Use AWS Glue to create a data catalog for the logs in Amazon S3 and query them using Amazon Athena.
Show answer and explanation
Correct answers: A, D, E
Explanation
To design and implement a centralized logging solution, the organization must enable AWS CloudTrail to capture and deliver logs to an S3 bucket. The S3 bucket should be configured with versioning and encryption to meet compliance and security standards. Additionally, AWS Glue can be used to catalog the logs stored in S3, enabling Amazon Athena to query and analyze them effectively. Incorrect options either do not contribute directly to the solution or involve inappropriate services for the specified requirements.
- A. Correct.
Correct: Enabling AWS CloudTrail ensures that API activity and management events are logged and delivered to the specified S3 bucket, which is essential for centralized logging.
- B. Incorrect.
Incorrect: Amazon CloudWatch Logs Insights is not used to query logs stored in S3. It is used for analyzing logs stored in CloudWatch Logs, which is a different service.
- C. Incorrect.
Incorrect: While AWS Config provides configuration change tracking, it is not directly related to implementing a logging solution for auditing and compliance.
- D. Correct.
Correct: Setting up an S3 bucket with the necessary access policies, versioning, and encryption ensures logs are securely stored and meet compliance requirements.
- E. Correct.
Correct: AWS Glue can create a data catalog for the logs stored in S3, which allows Amazon Athena to query the logs efficiently for analysis.