Cross-Account Log Aggregation Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering CloudWatch Security Monitoring

What you'll be asked

  1. What is the primary purpose of using a centralized logging account in AWS?
  2. When configuring cross-account log streaming to a central CloudWatch Log Group, which mechanism is primarily used to grant the source account permission to write logs?
  3. You have a centralized logging account and multiple member accounts. Which AWS service is best suited for automating the deployment of log shipping configurations across the entire organization?
  4. If you are using Kinesis Data Firehose to stream logs from a source account to a central account, what is the correct order of data flow?
  5. In a cross-account scenario, your logs are failing to arrive at the central Log Group. You have verified the IAM role has the correct 'logs:PutLogEvents' permission. What is the most likely cause for the failure?

Answers and explanations come after you submit.