AWS Certified Data Engineer Associate DEA-C01 Practice Question

An organization runs multiple AWS Glue ETL jobs in three AWS accounts. Security requires a single audit trail of all configuration changes and job invocations across the accounts, stored encrypted in a dedicated logging account. The solution must be operationally simple and minimize cost. Which approach meets these requirements?

  • Enable job bookmarks for every AWS Glue job and configure them to send logs to a central CloudWatch Logs group in the logging account.

  • Create an organization trail in the logging account by using AWS Organizations, log management events for all accounts, and encrypt the shared S3 bucket with a single customer managed KMS key.

  • In each account, create a trail that logs management events and delivers logs to an S3 bucket in the logging account encrypted with a unique customer managed KMS key per account.

  • Enable data events logging for all S3 buckets in every account and use AWS Lake Formation resource sharing to aggregate the logs in the logging account.

AWS Certified Data Engineer Associate DEA-C01
Data Operations and Support
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot