AWS - Architecture Best Practices
You are tasked with designing a secure AWS environment that enforces least privilege access and provides detailed audit logs of all API calls. Which combination of AWS services should you implement?
You are tasked with designing a secure AWS environment that enforces least privilege access and provides detailed audit logs of all API calls. Which combination of AWS services should you implement?
hard📝 Application Q8 of 15
Step-by-Step Solution
Solution:
Step 1: Enforce least privilege access
AWS IAM allows fine-grained permission management to enforce least privilege.Step 2: Provide detailed audit logs
AWS CloudTrail records all API calls for auditing and compliance.Final Answer:
AWS IAM for access control and AWS CloudTrail for auditing -> Option AQuick Check:
IAM controls access; CloudTrail logs API calls [OK]
Quick Trick: IAM controls access; CloudTrail logs activity [OK]
Common Mistakes:
- Confusing Shield and WAF as access control
- Assuming Config or GuardDuty provide full audit logs
- Thinking Trusted Advisor manages permissions
Master "Architecture Best Practices" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes