A company runs workloads in AWS and wants to centrally collect security data to assess company-wide security and improve workload protection. Which solution meets these requirements with the LEAST development effort?
Choose an answer
Tap an option to check your answer.
Correct answer: Configure a data lake in Amazon Security Lake to collect the security data and upload the data to an Amazon S3 bucket..
Why this is the answer
Amazon Security Lake is a purpose-built security data lake service that automatically centralizes security data from AWS environments, SaaS providers, on-premises sources, and custom sources into a purpose-built data lake. It normalizes this data into the Open Cyber Security Schema Framework (OCSF) format, making it easy to analyze. This solution requires the least development effort because Security Lake handles the collection, normalization, and storage automatically, and it can export data to an S3 bucket. Configuring a data lake in AWS Lake Formation with AWS Glue crawlers would require significant development effort to define schemas, ETL jobs, and integrate various security sources. An AWS Lambda function to collect data in .csv format is a custom solution requiring extensive development and maintenance for each data source. AWS DMS is designed for database migration, not for centralizing diverse security logs, and loading into an Amazon RDS cluster is not suitable for large volumes of unstructured or semi-structured security data.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed