AWS Certified Data Engineer Associate DEA-C01 Practice Question
A company uses an AWS Step Functions workflow that starts an AWS Glue crawler, runs a Glue ETL job, and finally submits an Amazon Athena query. The data engineering team must audit who invoked every API call in the pipeline, retain evidence for at least 400 days, and troubleshoot performance by running ad-hoc SQL queries on the log data. Which solution meets these needs with the least operational overhead?
Publish every Step Functions state transition to Amazon EventBridge, send the events to an Amazon SQS queue, invoke an AWS Lambda function to write the events to Amazon DynamoDB, and analyze the data with PartiQL queries.
Create a multi-Region trail in AWS CloudTrail that logs management events for all AWS accounts, store the logs in an encrypted Amazon S3 bucket with a 400-day Lifecycle retention rule, and use an Athena table over the CloudTrail logs to query the data.
Configure each Step Functions state, Glue job, and Athena workgroup to stream logs to separate Amazon CloudWatch Logs log groups with a 400-day retention period, then use CloudWatch Logs Insights for ad-hoc analysis.
Enable Amazon Macie on the account's S3 buckets to discover sensitive data in pipeline logs and use the Macie console to review all API activity for auditing and troubleshooting.
AWS CloudTrail automatically records management API calls made by Step Functions, Glue, and Athena. Creating a multi-Region trail that delivers logs to an Amazon S3 bucket provides a single audit source. An S3 Lifecycle rule that expires objects after 400 days satisfies the retention policy. From the CloudTrail console the team can automatically create an Athena table over the JSON logs and run SQL queries immediately, avoiding extra ingestion or storage layers. The other options require operating multiple log groups, custom code, or services that do not capture caller identity at the API level.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is AWS CloudTrail and how does it log API calls?
Open an interactive chat with Bash
How does Amazon S3 Lifecycle configuration work for log retention?
Open an interactive chat with Bash
How can Athena query CloudTrail logs stored in Amazon S3?
Open an interactive chat with Bash
AWS Certified Data Engineer Associate DEA-C01
Data Operations and Support
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .