Amazon Exam SAA-C03 Topic 5 Question 31 Discussion

Actual exam question for Amazon's SAA-C03 exam

Question #: 31
Topic #: 5

A company wants to analyze and troubleshoot Access Denied errors and Unauthonzed errors that are related to 1AM permissions The company has AWS CloudTrail turned on Which solution will meet these requirements with the LEAST effort?

AUse AWS Glue and write custom scripts to query CloudTrail logs for the errors

BUse AWS Batch and write custom scripts to query CloudTrail logs for the errors

CSearch CloudTrail logs with Amazon Athena queries to identify the errors

DSearch CloudTrail logs with Amazon QuickSight. Create a dashboard to identify the errors.

Show Suggested Answer

Suggested Answer: C

This solution meets the following requirements:

It is the least effort, as it does not require any additional AWS services, custom scripts, or data processing steps. Amazon Athena is a serverless interactive query service that allows you to analyze data in Amazon S3 using standard SQL. You can use Athena to query CloudTrail logs directly from the S3 bucket where they are stored, without any data loading or transformation. You can also use the AWS Management Console, the AWS CLI, or the Athena API to run and manage your queries.

It is effective, as it allows you to filter, aggregate, and join CloudTrail log data using SQL syntax. You can use various SQL functions and operators to specify the criteria for identifying Access Denied and Unauthorized errors, such as the error code, the user identity, the event source, the event name, the event time, and the resource ARN. You can also use subqueries, views, and common table expressions to simplify and optimize your queries.

It is flexible, as it allows you to customize and save your queries for future use. You can also export the query results to other formats, such as CSV or JSON, or integrate them with other AWS services, such as Amazon QuickSight, for further analysis and visualization.

Querying AWS CloudTrail Logs - Amazon Athena

Analyzing Data in S3 using Amazon Athena | AWS Big Data Blog

Troubleshoot IAM permisson access denied or unauthorized errors | AWS re:Post

by Sue at Mar 20, 2024, 11:29 AM

Limited Time Offer

25%

Off

Get Premium SAA-C03 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mable

5 months ago

I see. So, it looks like C) Search CloudTrail logs with Amazon Athena queries to identify the errors is the preferred option.

upvoted 0 times

...

Carlton

5 months ago

That's true. Amazon Athena is more user-friendly for this type of analysis.

upvoted 0 times

...

Willard

5 months ago

Using AWS Glue might require more effort compared to Amazon Athena, though.

upvoted 0 times

...

Mable

5 months ago

I'm not sure, but I think using AWS Glue and writing custom scripts could work too.

upvoted 0 times

...

Carlton

6 months ago

I agree with Willard. Amazon Athena makes it easy to query the logs and identify the errors.

upvoted 0 times

...

Willard

6 months ago

I think the best solution would be to use Amazon Athena to search CloudTrail logs.

upvoted 0 times

...

Delsie

7 months ago

I personally prefer option C because using Amazon Athena queries seems like the most efficient way to identify the errors.

upvoted 0 times

...

Cecil

7 months ago

That's a good point, Lucia. Using AWS Glue could be a good alternative for analyzing the CloudTrail logs.

upvoted 0 times

...

Lucia

7 months ago

I'm not sure, but I think using AWS Glue and custom scripts could also work well for analyzing the errors.

upvoted 0 times

...

Paz

7 months ago

I disagree, I believe option D is better because creating a dashboard with Amazon QuickSight will provide a visual representation of the errors.

upvoted 0 times

...

Cecil

7 months ago

I think option C is the best solution, using Amazon Athena to search for errors in CloudTrail logs.

upvoted 0 times

...

Vernice

8 months ago

Exactly, we don't need to go all out with a big data processing solution. Athena is the simple, straightforward choice. Although, I do wonder if the exam writers are just trying to trick us with those other options...

upvoted 0 times

...

Eliseo

8 months ago

I was thinking the same thing. The other options like Glue and Batch seem a bit overkill for this use case. And QuickSight is great, but building a dashboard might be more effort than we need here.

upvoted 0 times

Carissa

7 months ago

Exactly, it's the most practical choice for addressing these specific errors.

upvoted 0 times

...

Rusty

7 months ago

It's a straightforward solution that meets our requirements with minimal effort.

upvoted 0 times

...

Rozella

8 months ago

That's true, it saves us from having to write custom scripts and build dashboards.

upvoted 0 times

...

Alyce

8 months ago

Plus, we can easily run queries to troubleshoot and analyze the permissions.

upvoted 0 times

...

Penney

8 months ago

Definitely, it allows us to quickly pinpoint the Access Denied and Unauthorized errors.

upvoted 0 times

...

Adelle

8 months ago

I agree, using Athena seems like the most efficient option here.

upvoted 0 times

...

Elfrieda

8 months ago

C) Search CloudTrail logs with Amazon Athena queries to identify the errors

upvoted 0 times

...

Jacquelyne

8 months ago

I agree, option C does seem like the way to go. Athena is designed for querying log data like CloudTrail, and it's serverless, so we don't have to worry about provisioning and managing any infrastructure. Plus, the SQL-like queries should make it easy to find the errors we're looking for.

upvoted 0 times

...

Marguerita

8 months ago

Hmm, this seems like a straightforward question. I think the best solution here is option C - searching CloudTrail logs with Amazon Athena queries. It's the least effort and should give us the information we need to troubleshoot those Access Denied and Unauthorized errors.

upvoted 0 times

...

bexak

9 months ago

Correct Answer: C pass4surexams.com

upvoted 1 times

...