CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Understanding AWS Security Logging: A Question Breakdown
Get clarity on AWS security logging with our breakdown of a key exam question from the Security - Specialty certification.
Security logging can trip up even seasoned professionals. Candidates often confuse the specific roles of AWS services. Understanding the nuances can make or break your exam performance.
The question
Which AWS service provides a centralized place to manage and analyze security logs from various AWS services?
A. AWS CloudTrail
B. Amazon CloudWatch
C. AWS Config
D. AWS Security Hub
Think before you scroll
Consider the primary purpose of each service listed. Pay attention to how they interact with security logs and their overall functionality in the AWS ecosystem.
The answer
The correct option is B. Amazon CloudWatch. This service is essential for logging and monitoring across AWS, allowing users to track metrics, collect logs, and set alarms effectively.
Why the other options lose
A. AWS CloudTrail: While CloudTrail records API calls and events for AWS services, it does not serve as a centralized logging solution for all security logs. It focuses on tracking AWS account activity, which is a narrower scope compared to CloudWatch.
C. AWS Config: AWS Config tracks configuration changes to AWS resources. It provides insight into resource configurations but does not manage or analyze logs from various services. Its focus is on compliance and governance rather than centralized logging.
D. AWS Security Hub: Security Hub offers a comprehensive view of your security alerts and compliance status across AWS accounts. However, it does not centralize logging. Instead, it aggregates findings from other services, making it less suited for managing logs directly.
The concept behind it
The principle here is understanding the distinction between logging services and their primary functions. CloudWatch is the go-to for centralized logging and monitoring, while other services serve specific roles in security and compliance tracking. Remember, each service has its own strengths, and knowing these can help you tackle similar questions.
Exam trap to remember
Remember the central role of Amazon CloudWatch in logging and monitoring across AWS services. It’s the backbone for security log management in the AWS ecosystem.