Examkin

Question

Difficulty: MediumCloudWatch Dashboards and Container Insights

A SysOps Administrator needs to share an Amazon CloudWatch dashboard that visualizes Container Insights metrics for an Amazon ECS cluster with external business partners who do not have AWS accounts. The administrator must ensure that these partners can view the live dashboard securely without gaining access to any other AWS resources or console features. Which of the following actions will meet these requirements?

  1. Share the dashboard using a shareable link, select the option to share with specific email addresses, and allow CloudWatch to manage access using an Amazon Cognito user pool.Answer
  2. B
    Enable CloudWatch detailed monitoring on the container tasks to generate public metrics, export the dashboard template to Amazon S3, and configure an S3 bucket policy to allow public read access.
  3. C
    Set the Container Insights log group retention period to never expire, and configure a CloudWatch Logs Insights query to automatically email the dashboard report to the partners daily.
  4. D
    Create an Amazon EventBridge rule that detects Container Insights events and triggers a Systems Manager Automation document to generate a PDF of the dashboard and email it to the partners.

Answer

Share the dashboard using a shareable link, select the option to share with specific email addresses, and allow CloudWatch to manage access using an Amazon Cognito user pool.
The correct action is to share the dashboard using a shareable link and select the option to share with specific email addresses. Amazon CloudWatch supports sharing dashboards with users who do not have an AWS account by generating a unique URL and configuring username/password authentication. Behind the scenes, CloudWatch uses an Amazon Cognito user pool to manage these credentials securely, restricting external access strictly to the shared dashboard.

Step-by-Step Solution

1
Navigate to the Amazon CloudWatch console and select Dashboards.
The dashboards screen is displayed showing all existing dashboards.
To access the sharing options for the specific dashboard.
2
Select the target dashboard, choose Actions, and click Share dashboard.
The Share dashboard settings wizard is opened.
To configure external access control settings.
3
Select the option to share the dashboard with specific email addresses and enter the partners' emails.
CloudWatch creates and configures an Amazon Cognito user pool to handle sign-in credentials for these users.
This allows secure, authenticated access to the dashboard without requiring AWS account creation for the external users.

Key Concept

CloudWatch Dashboard Sharing
Estimated Time:1m 30s
Rate this question

Topics

CloudWatch Dashboards and Container Insights

More questions from this topic