AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 230

Question

A company uses AWS Organizations to manage its AWS accounts. The company wants its monitoring system to receive an alert when a root user logs in. The company also needs a dashboard to display any log activity that the root user generates. Which combination of steps will meet these requirements? (Choose three.)

Accepted Answer

Correct answer: C, E, F. The correct answer is C, E, F. Option C: Create an Amazon CloudWatch Logs metric filter to match root user login events. Configure a CloudWatch alarm and an Amazon Simple Notification Service (Amazon SNS) topic to send alerts to the company's monitoring system. Option E: Create an AWS CloudTrail organization trail. Configure the organization trail to send events to Amazon CloudWatch Logs. Option F: Create an Amazon CloudWatch dashboard that uses a CloudWatch Logs Insights query. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS CloudTrail records API activity for auditing and governance.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 230