Q46 — AWS DEA-C01 Ch.1

Question 46 of 100 | ← Chapter 1

A company stores details about transactions in an Amazon S3 bucket. The company wants to log all writes to the S3 bucket into another S3 Bucket that is in the same AWS Region. Which solution will meet this requirement with the LEAST operational effort?

• A. Configure an S3 Event Notifications rule for all activities on the transactions S3 bucket to invoke an AWS Lambda function. Program the Lambda function to write the event to Amazon Kinesis Data Firehose. Configure Kinesis Data Firehose to write the event to the logs S3 bucket.
• B. Create a trail of management events in AWS CloudTraiL. Configure the trail to receive data from the transactions S3 bucket. Specify an empty prefix and write-only events. Specify the logs S3 bucket as the destination bucket.
• C. Configure an S3 Event Notifications rule for all activities on the transactions S3 bucket to invoke an AWS Lambda function. Program the Lambda function to write the events to the logs S3 bucket.
• D. Create a trail of data events in AWS CloudTraiL. Configure the trail to receive data from the transactions S3 bucket. Specify an empty prefix and write-only events. Specify the logs S3 bucket as the destination bucket. ✓

Correct Answer: D. Create a trail of data events in AWS CloudTraiL. Configure the trail to receive data from the transactions S3 bucket. Specify an empty prefix and write-only events. Specify the logs S3 bucket as the destination bucket.

Explanation

为了将S3桶中的写操作日志记录到另一个S3桶中，并且要求操作努力最小，我们可以分析各个选项：A选项提出了使用S3事件通知触发Lambda函数，然后Lambda函数将数据写入KinesisDataFirehose，最后由Firehose写入日志S3桶。这个方案涉及多个服务和较复杂的配置。B选项提到使用AWSCloudTraiL来创建管理事件的轨迹。然而，CloudTraiL主要用于记录AWS管理控制台的操作，不适用于S3桶内的数据操作。C选项建议使用S3事件通知触发Lambda函数，然后直接由Lambda函数写入日志S3桶。这个方案比A简单，但仍然需要配置Lambda函数。D选项提出使用AWSCloudTraiL来创建数据事件的轨迹，直接指定源S3桶和目标日志S3桶，并且只记录写操作。这个方案最为直接和简单，不需要额外的数据处理或服务。因此，D选项提供了最小的操作努力，并且能够满足要求。