AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

Your company has three AWS accounts (A, B, and C) that belong to the same organization. Operations wants a single CloudWatch dashboard in account A (us-east-1) that shows EC2 CPUUtilization metrics from accounts B and C in both us-east-1 and eu-west-1. They need the simplest solution that avoids copying data between Regions or running additional agents. Which set of steps will meet these requirements according to AWS best practices?

Enable cross-Region replication for CloudWatch in accounts B and C so that their eu-west-1 metrics are copied to us-east-1, then create a single-Region dashboard in account A.
Install the CloudWatch agent on all instances in accounts B and C with a configuration that publishes the metrics directly into the log group of account A.
Share each Region's metrics from accounts B and C to account A by using AWS Resource Access Manager, then add the shared metrics to a dashboard in account A.
In accounts B and C, create an IAM role that trusts account A and grants CloudWatch read-only access; from account A, build the dashboard widgets using metric identifiers that include the source account IDs and Regions.

Report Issue

Answer Description

CloudWatch dashboards can display metrics that reside in another Region or another account without any data replication. Each source account must allow the dashboard account to read its metrics. The documented way is to create an IAM role (any name is allowed) in each source account that trusts the monitoring account, attach a read-only CloudWatch policy, and then reference the remote Region and account ID when you build the widget (for example, account-id:region, namespace, metric-name, dimensions). No resource shares, data exports, or agents are required. The console and PutDashboard API automatically assume the role when rendering the widget, so the dashboard refreshes seamlessly across accounts and Regions. Options suggesting AWS RAM, data replication, or running agents introduce unnecessary complexity and are not required for cross-account, cross-Region dashboards.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.