Amazon Exam SCS-C02 Topic 6 Question 5 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 5
Topic #: 6

A security engineer logs in to the AWS Lambda console with administrator permissions. The security engineer is trying to view logs in Amazon CloudWatch for a Lambda function that is named my Function.

When the security engineer chooses the option in the Lambda console to view logs in CloudWatch, an ''error loading Log Streams" message appears.

The IAM policy for the Lambda function's execution role contains the following:

How should the security engineer correct the error?

AMove the logs:CreateLogGroup action to the second Allow statement.

BAdd the logs:PutDestination action to the second Allow statement.

CAdd the logs:GetLogEvents action to the second Allow statement.

DAdd the logs:CreateLogStream action to the second Allow statement.

Show Suggested Answer

Suggested Answer: D

CloudWatchLogsReadOnlyAccess doesn't include 'logs:CreateLogStream' but it includes 'logs:Get*' https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/iam-identity-based-access-control-cwl.html#:~:text=oam%3A*%3A*%3Asink/*%22%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%5D%0A%7D-,CloudWatchLogsReadOnlyAccess,-The%20CloudWatchLogsReadOnlyAccess%20policy

by Lonna at Oct 07, 2023, 08:45 AM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!