AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 192

Question

AWS CloudTrail is being used to monitor API calls in an organization. An audit revealed that CloudTrail is failing to deliver events to Amazon S3 as expected. What initial actions should be taken to allow delivery of CloudTrail events to S3? (Choose two.)

Accepted Answer

Correct answer: A, D. The correct answer is A, D. Option A: Verify that the S3 bucket policy allows CloudTrail to write objects. Option D: Verify that the S3 bucket defined in CloudTrail exists. Amazon S3 provides durable, scalable object storage that is fully managed. AWS CloudTrail records API activity for auditing and governance.

AWS Certified Security - Specialty SCS-C02 — Question 192