AWS Certified Data Analytics Specialty 2021 – Hands-On - CloudTrail

The video tutorial explains AWS Cloud Trail, a service for tracking API calls in AWS accounts. It covers Cloud Trail's default settings, its ability to log API calls from various sources, and how it integrates with Cloudwatch Logs for data storage and analysis. The tutorial also demonstrates using the Cloud Trail console to filter events and create trails for extended data retention. Additionally, it discusses storing Cloud Trail data in S3 with encryption and using Amazon Athena for querying logs.

How does CloudTrail help in identifying actions like resource deletions?

• By storing logs in CloudWatch Logs for querying

• By sending notifications to the admin

• By automatically restoring deleted resources

• By providing real-time alerts

What is the default retention period for CloudTrail logs?

• 30 days

• 120 days

• 60 days

• 90 days

What is the primary purpose of AWS CloudTrail?

• To manage AWS user permissions

• To optimize AWS resource costs

• To track and log all API calls for governance and compliance

• To provide high availability for AWS services

Where can detailed CloudTrail trails be stored for further analysis?

• Amazon RDS

• Amazon DynamoDB

• Amazon S3

• Amazon EC2

What tool can be used to query CloudTrail logs stored in S3?

• Amazon Athena

• Amazon QuickSight

• Amazon Redshift

• Amazon SageMaker

What can be specified when creating a CloudTrail trail?

• The IAM roles to be used

• The type of EC2 instances to monitor

• The VPCs to include

• The AWS region it applies to

What happens when you stop a CloudTrail trail?

• It deletes all existing logs

• It stops logging new events but keeps existing logs

• It archives the logs to Glacier

• It sends a notification to all users