AWS Certified Security - Specialty SCS-C03

By Amazon · Question Mode

QuestionQ34

Data Protection

A security engineer must implement a logging solution that captures detailed information about objects in an Amazon S3 bucket. The solution must include details such as the IAM identity making the request and the time when the object was accessed. The data must be structured and available in near real time.

Which solution fulfills these requirements?

Explanation

AWS CloudTrail data events record Amazon S3 object-level API activity, including object reads such as GetObject. CloudTrail logs use a structured JSON format and include userIdentity and eventTime fields. A trail can deliver the event logs to a designated Amazon S3 bucket, typically within about five minutes of an API call.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!