AWS Certified Security - Specialty SCS-C03

By Amazon · Question Mode

QuestionQ15

Infrastructure Security

A startup uses one AWS account with resources in one AWS Region. A security engineer configures an AWS CloudTrail trail in that same Region, using the AWS CLI, to deliver log files to an Amazon S3 bucket.

Because the company is expanding, it adds resources in multiple Regions. The security engineer finds that logs from the new Regions are not arriving in the S3 bucket.

What should the security engineer do to resolve this issue with the LEAST operational overhead?

Explanation

An existing single-Region CloudTrail trail can be updated with the --is-multi-region-trail setting so it applies to all enabled AWS Regions. A multi-Region trail delivers event logs from those Regions to the same configured Amazon S3 bucket, while retaining one trail configuration to manage.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!