AWS Certified Data Engineer - Associate DEA-C01 — Topic 1 Question 193

Question

A company stores its processed data in an S3 bucket. The company has a strict data access policy. The company uses IAM roles to grant teams within the company different levels of access to the S3 bucket. The company wants to receive notifications when a user violates the data access policy. Each notification must include the username of the user who violated the policy. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Use AWS CloudTrail to track object-level events for the S3 bucket. Forward events to Amazon CloudWatch to set up CloudWatch alarms. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS CloudTrail records API activity for auditing and governance.

AWS Certified Data Engineer - Associate DEA-C01 — Question 193