AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 218

Question

A company uses Amazon Cognito as an OAuth 2.0 identity platform for its web and mobile applications. The company needs to capture successful and unsuccessful login attempts. The company also needs to query the data about the login attempts. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Enable AWS CloudTrail to deliver logs to an Amazon S3 bucket. Use Amazon Athena to query the logs for event names of InitiateAuth with event sources of cognito-idp.amazonaws.com. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. Amazon Cognito manages user sign-up, sign-in and federated identity for applications.

AWS Certified Security - Specialty SCS-C02 — Question 218