A customer wants to track access to their Amazon Simple Storage Service (S3) buckets and also use this
information for their internal security and access audits. Which of the following will meet the Customer
requirement?
A.
Enable AWS CloudTrail to audit all Amazon S3 bucket access.
B.
Enable server access logging for all required Amazon S3 buckets.
C.
Enable the Requester Pays option to track access via AWS Billing
D.
Enable Amazon S3 event notifications for Put and Post.
B
That surprises me a lot that B is correct, but it apparently is
http://docs.aws.amazon.com/AmazonS3/latest/dev/monitoring-automated-manual.html
…
You may want to enable server access logging, which tracks requests for access to your bucket. Each access log record provides details about a single access request, such as the requester, bucket name, request time, request action, response status, and error code, if any. For more information, see Server Access Logging in the Amazon Simple Storage Service Developer Guide.
Yes, its B. Because the request is to track access for security and access audits. So, server access logging fits the best answer.
B