Last Updated on November 18, 2021 by Admin 3
A SysOps Administrator must generate a report that provides a breakdown of all API activity by a specific user over the course of a year. AWS CloudTrail has already been enabled.
How should this report be generated?
- Use the AWS Management Console to search for the user name in the CloudTrail history. Filter by API and download the report in CSV format.
- Use the CloudTrail digest files stored in the company’s Amazon S3 bucket. Send the logs to Amazon QuickSight to create the report.
- Locate the monthly reports that CloudTrail sends that are emailed to the account’s root user. Forward the reports to the auditor using a secure channel.
- Access the CloudTrail logs stored in the Amazon S3 bucket tied to CloudTrail. Use Amazon Athena to extract the information needed to generate the report.