A company wants to analyze and troubleshoot AccessDenied and Unauthorized errors related to IAM permissions. AWS CloudTrail is enabled. Which solution will meet these requirements with the LEAST effort?
Choose an answer
Tap an option to check your answer.
Correct answer: Search CloudTrail logs with Amazon Athena queries to identify the errors..
Why this is the answer
Searching CloudTrail logs with Amazon Athena queries is the most efficient solution because Athena allows direct, ad-hoc querying of log data stored in S3 using standard SQL. CloudTrail automatically delivers logs to an S3 bucket, making them immediately accessible to Athena without additional processing or data movement. This minimizes effort compared to writing custom scripts or setting up complex data pipelines. Using AWS Glue or AWS Batch with custom scripts would involve more development and operational overhead to process and query the logs. While Amazon QuickSight can visualize data, it typically requires a data source like Athena or a prepared dataset; it's not designed for direct, ad-hoc querying of raw log files for troubleshooting purposes.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed