AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
Your organization has 10 member accounts in AWS Organizations operating in us-east-1, us-west-2, and eu-central-1. Operations engineers need a single CloudWatch dashboard in a dedicated monitoring account that shows existing CloudWatch metrics and alarms from all member accounts and Regions. The solution must follow least-privilege principles and must not require any additional services to copy, store, or stream data. Which approach meets these requirements?
Stream all metrics from each account to an Amazon Managed Service for Prometheus workspace in the monitoring account and visualize them with Amazon QuickSight.
Use AWS Resource Access Manager in each member account to share every required metric and alarm with the monitoring account, then add them to the dashboard.
Configure CloudWatch cross-account observability (OAM) by creating a sink in the monitoring account and links in each Region of every member account, then build the dashboard.
Enable cross-account, cross-Region CloudWatch functionality: create CloudWatch-CrossAccountSharingRole in each member account, enable AWSServiceRoleForCloudWatchCrossAccount in the monitoring account, and build the dashboard there.
Cross-account, cross-Region CloudWatch dashboards provide the required visibility. In each member (source) account you launch the CloudWatch-CrossAccountSharingRole CloudFormation template, which creates the CloudWatch-CrossAccountSharingRole that trusts the monitoring account. In the monitoring account you enable cross-account, cross-Region viewing, which automatically creates the service-linked role AWSServiceRoleForCloudWatchCrossAccount. After those roles exist, a dashboard in the monitoring account can include widgets that reference metrics and alarms from any linked account and Region, with no metric streams, external storage, or additional analytics services.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the CloudWatch-CrossAccountSharingRole?
Open an interactive chat with Bash
What is AWSServiceRoleForCloudWatchCrossAccount?
Open an interactive chat with Bash
How do cross-account, cross-Region CloudWatch dashboards work?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Monitoring, Logging, Analysis, Remediation, and Performance Optimization
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .