A travel booking startup wants to establish a logging and monitoring workflow on AWS. The security team needs to audit and track all API calls and user changes made within the AWS account for compliance. The operations team needs to monitor the CPU usage of their Amazon EC2 instances and receive alerts if utilization goes above a threshold. Which AWS services should the startup implement to meet these requirements? (Select TWO.)
- AWS CloudTrail to capture and audit API activity across the AWS infrastructureCevap
- Amazon CloudWatch to collect resource metrics and trigger alerts when performance thresholds are exceededCevap
- CAmazon GuardDuty to inspect EC2 instances for software vulnerabilities and compliance deviations
- DAWS Shield to automatically manage guest operating system patching and log OS-level events
Cevap
AWS CloudTrail and Amazon CloudWatch should be implemented.
AWS CloudTrail is correct because it provides continuous tracking of user actions and API calls across AWS services, serving the compliance and auditing needs. Amazon CloudWatch is correct because it monitors performance metrics like CPU usage and supports automated alarms when specified thresholds are exceeded.
Adım Adım Çözüm
Anahtar Kavram
AWS logging, monitoring, and auditing services