Exam AWS-SysOps topic 1 question 931 discussion

Exam question from Amazon's AWS-SysOps

Question #: 931
Topic #: 1

A company is hosting a website on an Amazon EC2 instance that runs in a public subnet inside a VPC. The company uses Amazon CloudWatch Logs for web server log analysis.
A SysOps administrator has installed and configured the CloudWatch Logs agent on the EC2 instance and has confirmed that the agent is running. However, logs are not showing up in CloudWatch Logs.
Which solution will resolve this issue?

A. Modify the EC2 instance security group rules to allow inbound traffic on port 80.
B. Create an IAM user that has the proper permissions for CloudWatch logs. Create an IAM instance profile, and associate it with the IAM user. Associate the instance profile with the EC2 instance.
C. Create an IAM role that has the proper permissions for CloudWatch logs. Create an IAM instance profile, and associate it with the IAM role. Associate the instance profile with the EC2 instance.
D. Modify the VPC's network ACL rules for the public subnet to allow inbound traffic on port 80.

Show Suggested Answer

Suggested Answer: B 🗳️

by qurren at July 1, 2021, 3:28 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

albert_kuo

11 months ago

Selected Answer: C

When using the CloudWatch Logs agent to send logs from an EC2 instance to CloudWatch Logs, the EC2 instance needs an IAM role with the necessary permissions to write log data to CloudWatch Logs. This is achieved by creating an IAM role that grants the appropriate permissions for CloudWatch Logs, and then associating that role with the EC2 instance using an IAM instance profile.

upvoted 1 times

...