AWS Certified Data Engineer - Associate DEA-C01Demo

By Amazon · Question Mode

QuestionQ188

Data Security and Governance

A company must collect logs for an Amazon RDS for MySQL database and make those logs available for audits. The logs must identify every user who modifies data in the database or changes the database instance.

Which solution meets these requirements?

  • A Enable Amazon CloudWatch Logs. Create metric filters to monitor database changes and instance-level changes. Configure automated notification systems to send near real-time alerts for suspicious database operations.
  • B Configure an Amazon EventBridge rule to monitor database activity. Create an AWS Lambda function to process EventBridge events and store them in Amazon OpenSearch Service.
  • C Configure AWS CloudTrail to log API calls. Use Amazon CloudWatch Logs for basic monitoring. Use IAM policies to control access to the logs. Set up scheduled reporting for log audits.
  • D Enable and configure native Amazon RDS database audit logging. Enable Amazon CloudWatch Logs. Configure metric filters and alarms. Configure AWS CloudTrail audit logging.
Explanation

Amazon RDS for MySQL audit logging records database activity, including data changes by database users, and can be published to Amazon CloudWatch Logs for durable access and monitoring. AWS CloudTrail records Amazon RDS API actions, including database-instance changes, and identifies the user or role that made them. Together, these provide coverage for both database-level modifications and instance-level changes.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!