Question list
List of questions
Related questions
Question 164 - DAS-C01 discussion
A company recently created a test AWS account to use for a development environment. The company also created a production AWS account in another AWS Region. As part of its security testing, the company wants to send log data from Amazon CloudWatch Logs in its production account to an Amazon Kinesis data stream in its test account. Which solution will allow the company to accomplish this goal?
A.
Create a subscription filter in the production account’s CloudWatch Logs to target the Kinesis data stream in the test account as its destination. In the test account, create an IAM role that grants access to the Kinesis data stream and theCloudWatch Logs resources in the production account.
B.
In the test account, create an IAM role that grants access to the Kinesis data stream and the CloudWatch Logs resources in the production account. Create a destination data stream in Kinesis Data Streams in the test account with anIAM role and a trust policy that allow CloudWatch Logs in the production account to write to the test account.
C.
In the test account, create an IAM role that grants access to the Kinesis data stream and the CloudWatch Logs resources in the production account. Create a destination data stream in Kinesis Data Streams in the test account with anIAM role and a trust policy that allow CloudWatch Logs in the production account to write to the test account.
D.
Create a destination data stream in Kinesis Data Streams in the test account with an IAM role and a trust policy that allow CloudWatch Logs in the production account to write to the test account. Create a subscription filter in theproduction account’s CloudWatch Logs to target the Kinesis data stream in the test account as its destination.
Previous
Next
Your answer:
0 comments
Sorted by
Leave a comment first
