AWS Certified Database – Specialty — Question 151

A large automobile company is migrating the database of a critical financial application to Amazon DynamoDB. The company's risk and compliance policy requires that every change in the database be recorded as a log entry for audits. The system is anticipating more than 500,000 log entries each minute. Log entries should be stored in batches of at least 100,000 records in each file in Apache Parquet format.
How should a database specialist implement these requirements with DynamoDB?

Answer options

• A. Enable Amazon DynamoDB Streams on the table. Create an AWS Lambda function triggered by the stream. Write the log entries to an Amazon S3 object.
• B. Create a backup plan in AWS Backup to back up the DynamoDB table once a day. Create an AWS Lambda function that restores the backup in another table and compares both tables for changes. Generate the log entries and write them to an Amazon S3 object.
• C. Enable AWS CloudTrail logs on the table. Create an AWS Lambda function that reads the log files once an hour and filters DynamoDB API actions. Write the filtered log files to Amazon S3.
• D. Enable Amazon DynamoDB Streams on the table. Create an AWS Lambda function triggered by the stream. Write the log entries to an Amazon Kinesis Data Firehose delivery stream with buffering and Amazon S3 as the destination.

Correct answer: D

Explanation

The correct answer is D because it utilizes Amazon DynamoDB Streams to capture changes in real-time and then processes those changes through AWS Lambda, directing them to an Amazon Kinesis Data Firehose delivery stream, which can efficiently handle the high volume of log entries and store them in S3. Options A and C do not meet the requirement of batching entries and using Kinesis, while option B is inefficient as it relies on backup and comparison, which is not suitable for real-time logging.