AWS Certified Database – Specialty — Question 37

The Security team for a finance company was notified of an internal security breach that happened 3 weeks ago. A Database Specialist must start producing audit logs out of the production Amazon Aurora PostgreSQL cluster for the Security team to use for monitoring and alerting. The Security team is required to perform real-time alerting and monitoring outside the Aurora DB cluster and wants to have the cluster push encrypted files to the chosen solution.
Which approach will meet these requirements?

Answer options

• A. Use pg_audit to generate audit logs and send the logs to the Security team.
• B. Use AWS CloudTrail to audit the DB cluster and the Security team will get data from Amazon S3.
• C. Set up database activity streams and connect the data stream from Amazon Kinesis to consumer applications.
• D. Turn on verbose logging and set up a schedule for the logs to be dumped out for the Security team.

Correct answer: C

Explanation

The correct answer is C because setting up database activity streams allows for real-time data streaming to external systems, which is essential for the Security team's monitoring needs. Options A and B do not provide real-time capabilities or the required encryption for alerting. Option D involves scheduled logs, which does not meet the requirement for real-time monitoring.