AWS Certified DevOps Engineer – Professional (DOP-C02) — Question 274

A company uses Amazon Redshift as its data warehouse solution. The company wants to create a dashboard to view changes to the Redshift users and the queries the users perform.

Which combination of steps will meet this requirement? (Choose two.)

Answer options

• A. Create an Amazon CloudWatch log group. Create an AWS CloudTrail trail that writes to the CloudWatch log group.
• B. Create a new Amazon S3 bucket. Configure default audit logging on the Redshift cluster. Configure the S3 bucket as the target.
• C. Configure the Redshift cluster database audit logging to include user activity logs. Configure Amazon CloudWatch as the target.
• D. Create an Amazon CloudWatch dashboard that has a log widget. Configure the widget to display user details from the Redshift logs.
• E. Create an AWS Lambda function that uses Amazon Athena to query the Redshift logs. Create an Amazon CloudWatch dashboard that has a custom widget type that uses the Lambda function.

Correct answer: C, D

Explanation

To track internal database queries and user modifications, database audit logging must be configured on the Redshift cluster to include user activity logs and stream them directly to Amazon CloudWatch. Once the logs are in CloudWatch, a native CloudWatch dashboard log widget can be easily set up to query and display the required user details without needing complex Athena or Lambda integrations. Other options either route logs to S3 (which complicates real-time dashboarding) or rely on CloudTrail, which only tracks management API calls rather than database-level user queries.