A company has a legacy application that runs on a single Amazon EC2 instance. A security audit shows that the application has been using an IAM access key within its code to access an Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET1 in the same AWS account. This access key pair has the s3:GetObject permission to all objects in only this S3 bucket. The company takes the application offline because the application is not compliant with the company’s security policies for accessing other AWS resources from Amazon EC2.
A security engineer validates that AWS CloudTrail is turned on in all AWS Regions. CloudTrail is sending logs to an S3 bucket that is named DOC-EXAMPLE-BUCKET2. This S3 bucket is in the same AWS account as DOC-EXAMPLE-BUCKET1. However, CloudTrail has not been configured to send logs to Amazon CloudWatch Logs.
The company wants to know if any objects in DOC-EXAMPLE-BUCKET1 were accessed with the IAM access key in the past 60 days. If any objects were accessed, the company wants to know if any of the objects that are text files (.txt extension) contained personally identifiable information (PII).
Which combination of steps should the security engineer take to gather this information? (Choose two.)
hb0011
3 months agoFunkyFresco
3 months, 2 weeks agoshailvardhan
6 months, 1 week agoJlee7
8 months ago3633f8f
11 months, 3 weeks agoRaphaello
11 months, 4 weeks agoRaphaello
11 months, 4 weeks agoDaniel76
1 year agoDaniel76
11 months, 1 week agoYR4591
1 year ago[Removed]
1 year, 1 month agolalee2
1 year, 1 month agopupsik
1 year, 1 month agoSumi81
1 year, 1 month ago100fold
1 year, 1 month agotecte
1 year, 1 month agoaragon_saa
1 year, 2 months ago