An Amazon Redshift database contains sensitive user data. Logging is necessary to meet compliance requirements. The logs must contain database authentication attempts, connections, and disconnections. The logs must also contain each query run against the database and record which database user ran each query. Which steps will create the required logs?
A) Enable Amazon Redshift Enhanced VPC Routing. Enable VPC Flow Logs to monitor traffic.
B) Allow access to the Amazon Redshift database using AWS IAM only. Log access using AWS CloudTrail.
C) Enable audit logging for Amazon Redshift using the AWS Management Console or the AWS CLI.
D) Enable and download audit reports from AWS Artifact.

Question

Quizplus · Accepted Answer

Enabling audit logging for Amazon Redshift will capture database authentication attempts, connections, disconnections, and queries run against the database, including the user who ran each query.

An Amazon Redshift Database Contains Sensitive User Data