A company wants to use Cloudtrail for logging all API activity. They want to segregate the logging of data events and management events. How can this be achieved? Choose 2 answers from the options given below.

Answer options:

A.Create one Cloudtrail log group for data events.
B.Create one trail that logs data events to an S3 bucket.
C.Create another trail that logs management events to another S3 bucket.
D.Create another Cloudtrail log group for management events.

Answer: B and C
Options A is incorrect because you have to create a trail and not a log group.
Option B is CORRECT because you can configure multiple trails differently so that the trails process and log only the events that you specify. For example, one trail can log management events to deliver all management events to one S3 bucket.
Option C is CORRECT because CloudTrail can be configured to log management events or data events so that different events are delivered to separate S3 buckets.
Options D is incorrect because you have to create a trail and not a log group.
For more information on managing events with CloudTrail, kindly refer to the following URL:
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-management-and-data-events-with-cloudtrail.html