AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
You need to query logs stored in Amazon S3 to gather contextual information related to a recent security event. How would you use Amazon Athena to perform this task? Provide a detailed approach including the setup and the SQL queries you would use.
Explanation:
To use Amazon Athena for querying logs stored in S3, you would first use AWS Glue to crawl the data and create a metadata catalog. This catalog defines the schema for the logs. Once this is set up, you can use Athena to run SQL queries directly against the S3 data, allowing for efficient and scalable analysis of the log data to gather contextual information related to the security event.