Question 422:
The operation team in the company has recently initiated an audit to ensure that all major AWS components used are properly monitored with necessary logs, alarms and notifications. The company has also set up an on-call team to receive AWS alerts and notifications and react accordingly when necessary. The AWS service of CodePipeline has been used as well by the development team for the new feature development. Relevant CodePipeline activities should be monitored such as the time and date of actions, the source IP address for an action, etc. What should the operation team do to ensure that CodePipeline is being properly monitored with enough logging? Select 2.
Answer options:
A.AWS CloudTrail can be used to log AWS CodePipeline API calls and related events made by or on behalf of an AWS account. By CloudTrail, users can determine the request that was made to AWS CodePipeline, the IP address from which the request was made, who made the request, when it was made, and additional details. B.AWS Cloudwatch Metrics can be used to determine CodePipeline activities. In Cloudwatch Metrics, there are CodePipeline events in the namespace of AWS/CodePipeline. Users can also create a dashboard to understand the CodePipeline status based on the metrics. C.Activate the CodePipeline Logging feature in the console. During the setup of that, the logs can be saved in real time to a S3 bucket that the operation team chooses. And the operation team can use an editor or analytic tool to open the txt files in the S3 bucket to analyze and monitor D.Amazon CloudWatch Events can be used to monitor the AWS Cloud resources including CodePipeline. The operation team can create a rule in Amazon CloudWatch Events based on CodePipeline metrics that you define such as “CodePipeline Pipeline Execution State Change”. And then use a SNS topic as the target of this Cloudwatch Event rule.