A gaming startup is launching a new multiplayer game on AWS. To ensure security compliance and operational stability, the startup needs to accomplish two tasks: first, they must log and audit all administrative API operations and user activity within their AWS account; second, they must monitor system performance metrics (such as CPU utilization of their virtual servers) and receive alerts if performance drops. Which TWO AWS services should the startup implement to meet these requirements? (Select TWO)
- AWS CloudTrail to log and track API activities and user actions across the AWS account.Answer
- Amazon CloudWatch to collect performance metrics, monitor logs, and trigger automated alerts.Answer
- CAmazon Inspector to capture and record the history of API requests made by user accounts.
- DAWS Identity and Access Management (IAM) to manage operating system patches and network routing logs.
Answer
The startup should use AWS CloudTrail to log and track API activities, and Amazon CloudWatch to collect performance metrics and trigger alerts.
AWS CloudTrail records and tracks user actions and API calls made within the AWS account, which is crucial for compliance and security auditing. Amazon CloudWatch collects and tracks metrics, monitors log files, and sets alarms, which is essential for performance monitoring and operational alerts.
Step-by-Step Solution
Key Concept
Monitoring, logging, and auditing are split between auditing user activity (AWS CloudTrail) and monitoring system/resource performance (Amazon CloudWatch).