AWS Certified Security - Specialty SCS-C03

By Amazon · Question Mode

QuestionQ33

Data Protection

A company runs an application on Amazon EC2 instances in an Auto Scaling group. The application keeps logs locally. A security engineer discovered that logs were lost following a scale-in event. The security engineer must recommend a solution that ensures the durability and availability of log data. All logs must be retained for at least 1 year for auditing purposes.

What should the security engineer recommend?

Explanation

The Amazon CloudWatch agent can collect local EC2 log files and publish them to centralized Amazon CloudWatch Logs, where the data remains accessible after an Auto Scaling instance terminates. Configure the destination log group with retention of at least 365 days (or retain logs indefinitely) to meet the audit requirement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!