AWS - Advanced Security
You want to audit all API activity in your AWS account but exclude read-only events to reduce log volume. How should you configure CloudTrail?
You want to audit all API activity in your AWS account but exclude read-only events to reduce log volume. How should you configure CloudTrail?
hard📝 Application Q8 of 15
Step-by-Step Solution
Solution:
Step 1: Identify filter to exclude read-only events
Setting ReadWriteType to "WriteOnly" filters out read-only API calls.Step 2: Understand other options
Disabling management events excludes important logs; multi-region and "All" do not filter reads.Final Answer:
Set ReadWriteType to "WriteOnly" in event selectors -> Option BQuick Check:
Use WriteOnly to exclude read-only API calls = C [OK]
Quick Trick: Use WriteOnly filter to log only modifying API calls [OK]
Common Mistakes:
- Disabling management events
- Not using ReadWriteType filter
- Relying on post-log filtering
Master "Advanced Security" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes