CloudTrail Lake Queries Quiz

What you'll be asked

1. Which query language is used to run queries in CloudTrail Lake?
2. When querying CloudTrail Lake, which specific field is most commonly used to filter events by the identity that performed the action?
3. If you need to identify all 'Delete' actions performed in your environment over the last 30 days, which SQL clause is required to efficiently narrow down the scope?
4. You want to find the top 5 IAM users who have triggered the most 'AccessDenied' errors. Which combination of SQL clauses should you use?
5. When performing a join between two CloudTrail Lake event data stores, what is the primary constraint regarding the data stores?

Answers and explanations come after you submit.