Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 362 discussion

Answer: C

C is right This solution requires the least operational overhead because it leverages the existing S3 Storage Lens feature, which provides a pre-built dashboard for monitoring bucket and encryption metrics. The compliance teams can access this dashboard directly in the S3 console without requiring additional setup or configuration. This solution also eliminates the need to set up and manage multiple AWS resources (e.g., Lambda functions, Athena queries) or aggregate data from separate dashboards.

This use-case is really too rare to learn about on your own

Option C: Not A because the requirement is asking for "Least Operation Overhead" w/ S3 Storage Lens has a default dashboard. If you include QucikSight you are adding additional operational overhead, now you have to build your dashboard. https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_basics_metrics_recommendations.html#storage_lens_basics_default_dashboard

Option C

Answer: C Storage Lens is a built-in S3 feature that automatically collects and aggregates storage metrics, eliminating the need for custom development or infrastructure management. Option A: While Storage Lens supports multiple dashboards, creating and aggregating regional dashboards in QuickSight adds complexity and maintenance overhead. Option B: Involves custom Lambda development, data storage in S3, Athena queries, and QuickSight integration, increasing operational complexity and costs. Option D: Requires EventBridge rule configuration, Lambda function development, DynamoDB table management, and QuickSight integration, adding significant overhead.

C I was leaning towards A but it says in each region so that is wrong since Storage Lens gives you a view of all the regions. Someone has chosen B which is wrong b/c it has operational overhead.

I doubt B as the question is asking for LEAST operational choice instead of Best choice. The lambda function needs developer to write code.

Answer C. Storage Lens metrics include % of encrypted objects

Answer: C, S3 Storage Lens default=free metrics which offers encryption tracking. It's easy to set up and least overhead. https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_metrics_glossary.html

C is the best answer -- it's the most straightforward and involves the least operational overhead. It directly addresses the need to monitor S3 buckets and track encryption status without the need for additional setup or custom integrations. While it may not offer the same level of customization as some of the other options, it should suffice for most internal compliance requirements and is the most efficient choice in terms of minimizing operational complexity.

Given the scenario specifics, it's the only option that answers the need to aggregate data from two regions in a dashboard for compliance teams.

B is ok. To monitor a growing number of Amazon S3 buckets across two AWS Regions and track the percentage of objects that are encrypted in Amazon S3 with the least operational overhead, a solutions architect can consider the following steps: Deploy an AWS Lambda function in each Region to list the number of buckets and the encryption status of objects. Store this data in Amazon S3. Use Amazon Athena queries to display the data on a custom dashboard in Amazon QuickSight for the compliance teams