CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Exam Question Walkthrough: AWS Certified Solutions Architect - Associate (SAA-C03)
Master the AWS SAA-C03 exam with a detailed question walkthrough on logging solutions and immutability.
A startup wants to implement a logging solution for their application running on AWS. They want to ensure that logs are immutable and tamper-proof. Which AWS service would best meet these requirements?
Options:
- A. Amazon S3 with Object Lock
- B. AWS CloudTrail
- C. Amazon CloudWatch Logs with log retention
- D. AWS Config
Think before you scroll
This question tests your understanding of immutability in logging solutions. Consider which service offers the strongest protection against log alteration or deletion, as this is the crux of the requirement.
The answer
The correct option is A. Amazon S3 with Object Lock. This service allows you to create immutable objects, making it the best choice for ensuring that logs cannot be altered or deleted during their specified retention period.
Why the other options lose
- B. AWS CloudTrail: While CloudTrail provides important logging capabilities for AWS account activity, it does not offer immutability. Logs can still be altered or deleted, which does not meet the startup's requirement.
- C. Amazon CloudWatch Logs with log retention: CloudWatch Logs allows you to store and manage logs but lacks the immutability feature. Logs can be deleted or modified, thus failing to ensure tamper-proof logging.
- D. AWS Config: This service focuses on tracking resource configurations and compliance, not on logging. It does not provide logging capabilities and therefore does not satisfy the requirement for immutable logs.
The concept behind it
Immutability in logging means that once data is written, it cannot be changed or deleted. This is crucial for maintaining the integrity of logs, especially in environments where security and compliance are paramount. Services like Amazon S3 with Object Lock ensure that logs remain intact for the required retention period, making them reliable for audits and investigations.
Exam trap to remember
Remember the principle: immutable logs are non-negotiable for secure logging solutions. Always choose services that explicitly state immutability when faced with similar questions.