What's changed: Deepened SCS-C02 Chapter 2 (added comparison tables, scenarios, FAQs, exam traps, deep-dive paragraphs to each section; localized figures to Japanese)
2.4In-scope services for security logging and monitoring
A roundup of in-scope SCS-C03 services for security logging and monitoring.
2.4.1In-scope services for security logging and monitoring
For security logging and monitoring, beyond CloudTrail/CloudWatch/Config, know: AWS CloudTrail Lake (immutably retain CloudTrail events long-term and analyze with SQL), Amazon Managed Grafana (visualize metrics/logs), AWS User Notifications (centralize/deliver AWS notifications from many sources), Network Access Analyzer (statically analyze network reachability intent), and Amazon EMR (distributed analysis of large logs).
2.4.2Section summary
- Retain/analyze: CloudTrail Lake / EMR / Network Access Analyzer
- Visualize/notify: Managed Grafana / User Notifications
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. Which retains CloudTrail events immutably long-term and lets you query them with SQL for audit/investigation?
Q2. Which statically analyzes configuration (security groups, routes) to find unintended network reachability?
Keep track of your progress
The full study guide is free to read. Sign up free to practice with the question bank, track what you have read, review your mistakes, and highlight passages.