AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
You are tasked with querying logs stored in Amazon S3 to gather contextual information related to a security event. Describe the steps you would take to query the logs using Amazon Athena and analyze the results to identify any potential security threats.
Explanation:
Option C is the most comprehensive approach to querying logs in Amazon S3 for contextual information related to a security event. By running a SQL query on the logs and joining the results with other data sources, such as AWS CloudTrail logs or Amazon VPC Flow Logs, you can gain a more complete understanding of the security event and identify any potential threats. This approach allows for a more in-depth analysis and can help uncover hidden patterns or connections that may not be apparent when analyzing the logs in isolation.