A logistics company is migrating its tracking application to AWS and needs to set up a comprehensive monitoring and auditing solution. The company wants to track all administrative actions and API modifications made to their AWS resources for compliance auditing. Additionally, they need to collect system-level metrics, such as CPU utilization from their Amazon EC2 instances, and automatically send alerts if thresholds are exceeded.
Which of the following AWS services should the company configure to meet these requirements? (Select TWO.)
- AWS CloudTrail to audit and record all API calls, user activity, and resource modificationsCevap
- Amazon CloudWatch to collect metrics, monitor resource performance, and trigger alarms based on thresholdsCevap
- CAmazon Inspector to continuously monitor network traffic logs for active security threats
- DAWS Trusted Advisor to automatically install security patches on the Amazon EC2 guest operating systems
Cevap
AWS CloudTrail and Amazon CloudWatch are the correct services to configure.
AWS CloudTrail tracks and logs user activity and API transactions to provide a complete history of actions for compliance. Amazon CloudWatch collects and monitors real-time performance metrics (like CPU utilization) and sends alerts when pre-defined resource thresholds are breached.
Adım Adım Çözüm
Anahtar Kavram
AWS CloudTrail logs API calls and management events for compliance auditing, while Amazon CloudWatch monitors resource performance metrics and triggers operational alarms.