A company stores critical data m Amazon S3 buckets. A SysOps administrator must build a solution to record all S3 API activity. Which action will meet this requirement?
A.
Configure S3 bucket metrics to record object access logs
B.
Create an AWS CloudTrail trail to log data events tor all S3 objects
C.
Enable S3 server access logging for each S3 bucket
D.
Use AWS IAM Access Analyzer for Amazon S3 to store object access logs.
To record all S3 API activity, the SysOps administrator should create an AWS CloudTrail trail to log data events for all S3 objects. This solution provides comprehensive logging of all API activities at the object level within S3 buckets.
AWS CloudTrail:
CloudTrail allows you to log, continuously monitor, and retain account activity related to actions across your AWS infrastructure.
It records all API calls for Amazon S3 objects, providing a detailed history of changes made to S3 resources.
Configuration Steps:
Go to the CloudTrail console and create a new trail.
Enable data events and specify the S3 buckets to monitor.
CloudTrail will then record S3 object-level API operations such as GetObject, DeleteObject, and PutObject.
[Reference: Logging Data Events for S3 Buckets with CloudTrail, ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit