AWS Solutions Architect Practice Questions - AWS Certified Solutions Architect - Associate (SAA-C03) Exam

Access More Questions

A security team wants to ensure that no IAM principal in an AWS account can disable CloudTrail logging, even if they have full admin privileges. What is the most effective solution?

Apply an IAM policy to all users that denies cloudtrail:StopLogging Use AWS Organizations Service Control Policies (SCPs) to deny cloudtrail:StopLogging Enable MFA delete on the CloudTrail S3 bucket Configure CloudTrail with a log file validation checksum

Correct Answer:

Use AWS Organizations Service Control Policies (SCPs) to deny cloudtrail:StopLogging

Access more questions from this quiz

Continue to AWS Solutions Architect Practice Questions - AWS Certified Solutions Architect - Associate (SAA-C03) Exam for more practice questions and the full quiz experience.

Access More Questions