AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 194

Question

A security team is responsible for reviewing AWS API call activity in the cloud environment for security violations. These events must be recorded and retained in a centralized location for both current and future AWS regions. What is the SIMPLEST way to meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Enable AWS CloudTrail by creating a new trail and applying the trail to all regions. Specify a single Amazon S3 bucket as the storage location. Amazon S3 provides durable, scalable object storage that is fully managed. AWS CloudTrail records API activity for auditing and governance.

AWS Certified Security - Specialty SCS-C02 — Question 194