CloudTrail Quiz
A company has an application hosted in AWS. This application consists of EC2 Instances which sit behind an ELB with EC2 Instances. The following are requirements from an administrative perspective:
a) Ensure notifications are sent when the read requests go beyond 1000 requests per minute
b) Ensure notifications are sent when the latency goes beyond 10 seconds
c) Any API activity which calls for sensitive data should be monitored
Which of the following can be used to satisfy these requirements? Choose 2 answers from the options given below.
A. UseCloudTrail to monitor the API Activity.
B. UseCloudWatch logs to monitor the API Activity.
C. Use CloudWatch metrics for the metrics that needs to be monitored as per the requirement and set up an alarm activity to send out notificatIons when the metric reaches the set threshold limit.
D. Usea custom log software to monitor the latency and read requests to the ELB.
A. & C.
AWS CloudTrail can be used to monitor the API calls.
For more information on CloudTrail, please visit the following URL:
https://aws.amazon.com/cloudtrail/
When you use CloudWatch metrics for an ELB, you can get the amount of read requests and latency out of the box.
For more information on using Cloudwatch with the ELB, please visit the following URL:
https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-cloudwatch-metrics.html
Option A is correct. CloudTrail is a web service that records AWS API calls for your AWS account and delivers log files to an Amazon S3 bucket. The recorded information includes the identity of the user, the start time of the AWS API call, the source IP address, the request parameters, and the response elements returned by the service.
https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/Welcome.html
Option C is correct. Use Cloudwatch metrics for the metrics that needs to be monitored as per the requirement and set up an alarm activity to send out notificatons when the metric reaches the set threshold limit.
