An Organization Wants to Log All AWS API Calls Made

question 87

Multiple Choice

An organization wants to log all AWS API calls made within all of its AWS accounts, and must have a central place to analyze these logs. What steps should be taken to meet these requirements in the MOST secure manner? (Choose two.)

• A) Turn on AWS CloudTrail in each AWS account.
• B) Turn on CloudTrail in only the account that will be storing the logs.
• C) Update the bucket ACL of the bucket in the account that will be storing the logs so that other accounts can log to it.
• D) Create a service-based role for CloudTrail and associate it with CloudTrail in each account.
• E) Update the bucket policy of the bucket in the account that will be storing the logs so that other accounts can log to it.

---

Definitions:

Span of Control

It refers to the number of subordinates that a manager or supervisor can directly control.

First-Line Managers

Managers at the lowest level of an organization who directly supervise and support the work of non-managerial employees.

Organizing Process

The method of arranging resources and tasks to achieve an organization's goals efficiently and effectively.

Management Hierarchy

The arrangement of individuals within an organization according to power, status, and job functions, creating a structured chain of command.