A company needs to capture object-level activity in its Amazon S3 buckets and verify the integrity of the log files with a digital signature. Which solution will meet these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Create an AWS CloudTrail trail with log file validation enabled. Enable data events for Amazon S3..
Why this is the answer
The correct solution is to create an AWS CloudTrail trail with log file validation enabled and enable data events for Amazon S3. CloudTrail records API calls and related events made against your AWS resources, including object-level actions (data events) in S3. Log file validation uses cryptographic digests to verify the integrity of the log files, ensuring they haven't been tampered with. Incorrect options: S3 server access logs (options B and C) record requests made to an S3 bucket, but they do not provide log file integrity validation with a digital signature. They also don't capture all the detailed API activity that CloudTrail does. Option D incorrectly suggests enabling log file validation on an S3 bucket for server access logs. Log file validation is a feature of CloudTrail, not S3 server access logs directly.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed