Question

An administrator would like to check if the Amazon CloudFront identity is making access API calls to an S3 bucket where a static website is hosted. Where can this information be obtained?

A. Configuring Amazon Athena to run queries on the Amazon CloudFront distribution.

B. Check AWS CloudWatch logs on the S3 bucket.

C. In the webserver, tail for identity access logs from the Amazon CloudFront identity.

D. In AWS CloudTrail Event history, look up access calls and filter for the Amazon CloudFront identity.

Answer 1

Correct Answer - D.

By viewing Event history in Amazon CloudTrail, the administrator can be able to access operational, access and activity logs for the past 90 days, to the S3 bucket that hosts the static website.