The Security team for a finance company was notified of an internal security breach that happened 3 weeks ago. A Database Specialist must start producing audit logs out of the production Amazon Aurora PostgreSQL cluster for the Security team to use for monitoring and alerting. The Security team is required to perform real-time alerting and monitoring outside the Aurora DB cluster and wants to have the cluster push encrypted files to the chosen solution.
Which approach will meet these requirements?

A. Use pg_audit to generate audit logs and send the logs to the Security team.

B. Use AWS CloudTrail to audit the DB cluster and the Security team will get data from Amazon S3.

C. Set up database activity streams and connect the data stream from Amazon Kinesis to consumer applications.

D. Turn on verbose logging and set up a schedule for the logs to be dumped out for the Security team.








 

Suggested Answer: B

Community Answer: C

Reference:
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-ug.pdf

(525)


This question is in DBS-C01 AWS Certified Database – Specialty Exam
For getting AWS Certified Database – Specialty Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exam.