AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 58

Question

A SysOps administrator must manage the security of an AWS account. Recently, an IAM user's access key was mistakenly uploaded to a public code repository. The SysOps administrator must identify anything that was changed by using this access key. How should the SysOps administrator meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Search AWS CloudTrail event history for all events initiated with the compromised access key within the suspected timeframe. AWS CloudTrail records API activity for auditing and governance.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 58