AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 289

Question

A large company runs critical workloads in multiple AWS accounts. The AWS accounts are managed under AWS Organizations with all features enabled. The company stores confidential customer data in an Amazon S3 bucket. Access to the S3 bucket requires multiple levels of approval. The company wants to monitor when the S3 bucket is accessed by using the AWS CLI. The company also wants insights into the various activities performed by other users on all other S3 buckets in the AWS accounts to detect any issues. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create an AWS CloudTrail organization trail that is delivered to Amazon CloudWatch in the Organizations management account. Enable data events logs for all S3 buckets. Use Amazon CloudWatch anomaly detection in all th... Amazon S3 provides durable, scalable object storage that is fully managed. AWS Organizations centrally governs and secures multiple AWS accounts. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 289