QuestionQ87

Data Security and Governance

A company operates a data warehouse in Amazon Redshift. To meet security-regulation requirements, the company must log and retain all user and connection activities for the data warehouse.

Which solution meets these requirements?

  • A Create an Amazon S3 bucket. Enable logging for the Amazon Redshift cluster. Specify the S3 bucket in the logging configuration to store the logs.
  • B Create an Amazon Elastic File System (Amazon EFS) file system. Enable logging for the Amazon Redshift cluster. Write logs to the EFS file system.
  • C Create an Amazon Aurora MySQL database. Enable logging for the Amazon Redshift cluster. Write the logs to a table in the Aurora MySQL database.
  • D Create an Amazon Elastic Block Store (Amazon EBS) volume. Enable logging for the Amazon Redshift cluster. Write the logs to the EBS volume.
Explanation

Amazon Redshift database audit logging records connection, user, and user-activity events. For a provisioned cluster, Redshift can upload these audit log files to a configured Amazon S3 bucket, which provides durable storage for the required logs. Amazon EFS, Aurora MySQL, and Amazon EBS are not supported Redshift audit-log destinations.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!