AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 155

Question

An AWS Lambda function was misused to alter data, and a security engineer must identify who invoked the function and what output was produced. The engineer cannot find any logs created by the Lambda function in Amazon CloudWatch Logs. Which of the following explains why the logs are not available?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: The execution role for the Lambda function did not grant permissions to write log data to CloudWatch Logs. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

AWS Certified Security - Specialty SCS-C02 — Question 155