Multi-Account Logging Strategy Quiz

What you'll be asked

1. What is the primary purpose of a centralized logging account in a multi-account cloud environment?
2. When designing a cross-account logging architecture, why is it considered a best practice to use a dedicated 'Log Archive' account?
3. Which mechanism is most commonly used to securely transport log data from member accounts to a centralized logging account?
4. In a multi-account environment, what is the 'Principle of Least Privilege' implication for log access?
5. You are implementing a multi-account logging solution where logs are pushed from member accounts to a central S3 bucket. You notice that logs from one account are missing. Which of the following is the most likely culprit regarding the bucket policy?

Answers and explanations come after you submit.