SCS-C02 Question 74
Select 3Your organization uses an AWS-based e-commerce platform, and you are tasked with capturing and analyzing detailed logs of user activities for security compliance and anomaly detection. Which AWS service or combination of services should you use to efficiently capture this data without impacting user experience?
- A
Amazon Kinesis Data Streams
- B
AWS CloudTrail
- C
Amazon S3
- D
Amazon CloudWatch Logs
- E
AWS Config
Show answer and explanation
Correct answers: A, B, D
Explanation
To efficiently capture user activity data for security and compliance, you need a combination of services. Amazon Kinesis Data Streams can handle real-time data ingestion, AWS CloudTrail records API activity within your AWS environment, and Amazon CloudWatch Logs helps in collecting and analyzing log data from applications. Together, these services provide a comprehensive and efficient mechanism for data capture without impacting user experience.
- A. Correct.
Amazon Kinesis Data Streams is ideal for capturing and processing real-time streaming data, such as user activity logs, without impacting application performance.
- B. Correct.
AWS CloudTrail is crucial for recording API activity and events across the AWS environment, ensuring compliance and security visibility.
- C. Incorrect.
Amazon S3 is primarily used as a storage solution and does not directly facilitate data capture or real-time processing of activity logs.
- D. Correct.
Amazon CloudWatch Logs is used for collecting and storing log files from various sources, including custom application logs, making it a key component for monitoring user activity.
- E. Incorrect.
AWS Config tracks configuration changes in AWS resources but is not designed for capturing user activity or application logs.