AWS - Advanced Security
If a CloudTrail trail is configured with an event selector filtering only S3 data events, which of the following will be logged?
If a CloudTrail trail is configured with an event selector filtering only S3 data events, which of the following will be logged?
medium📝 service behavior Q5 of 15
Step-by-Step Solution
Solution:
Step 1: Understand event selectors for data events
Filtering for S3 data events logs API calls that access or modify S3 objects.Step 2: Exclude other service events
EC2 launches, IAM logins, and CloudWatch alarms are not S3 data events and won't be logged.Final Answer:
API calls to S3 bucket objects -> Option AQuick Check:
S3 data events filter logs S3 object API calls = A [OK]
Quick Trick: S3 data events log object-level API calls only [OK]
Common Mistakes:
- Expecting EC2 or IAM events
- Confusing data events with management events
Master "Advanced Security" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes