AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 454

Question

A company's SysOps administrator is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs. However, there are no logs in CloudWatch Logs. What could be blocking the VPC flow logs from being published to CloudWatch Logs?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: The IAM policy that is attached to the IAM role for the flow log is missing the logs CreateLogGroup permission An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 454