A Security Engineer Has Created an Amazon CloudWatch Event That

question 96

Multiple Choice

A Security Engineer has created an Amazon CloudWatch event that invokes an AWS Lambda function daily. The Lambda function runs an Amazon Athena query that checks AWS CloudTrail logs in Amazon S3 to detect whether any IAM user accounts or credentials have been created in the past 30 days. The results of the Athena query are created in the same S3 bucket. The Engineer runs a test execution of the Lambda function via the AWS Console, and the function runs successfully. After several minutes, the Engineer finds that his Athena query has failed with the error message: "Insufficient Permissions". The IAM permissions of the Security Engineer and the Lambda function are shown below: Security Engineer Lambda function execution role What is causing the error?

• A) The Lambda function does not have permissions to start the Athena query execution.
• B) The Security Engineer does not have permissions to start the Athena query execution.
• C) The Athena service does not support invocation through Lambda.
• D) The Lambda function does not have permissions to access the CloudTrail S3 bucket.