AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 197

Question

A company is storing sensitive data in an Amazon S3 bucket. The company must log all activities for objects in the S3 bucket and must keep the logs for 5 years. The company's security team also must receive an email notification every time there is an attempt to delete data in the S3 bucket. Which combination of steps will meet these requirements MOST cost-effectively? (Choose three.)

Accepted Answer

Correct answer: A, D, F. The correct answer is A, D, F. Option A: Configure AWS CloudTrail to log S3 data events. Option D: Configure Amazon S3 to send object deletion events to an Amazon EventBridge event bus that publishes to an Amazon Simple Notification Service (Amazon SNS) topic. Option F: Configure a new S3 bucket to store the logs with an S3 Lifecycle policy. S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. This option delivers the requirement at the lowest cost.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 197