You need to create an audit log of all changes to customer banking data. You use DynamoDB to store this customer banking data. It is important not to lose any information due to server failures. What is an elegant way to accomplish this?
A) Use a DynamoDB StreamSpecification and stream all changes to AWS Lambda. Log the changes to AWS CloudWatch Logs, removing sensitive information before logging.
B) Before writing to DynamoDB, do a pre-write acknoledgment to disk on the application server, removing sensitive information before logging. Periodically rotate these log files into S3.
C) Use a DynamoDB StreamSpecification and periodically flush to an EC2 instance store, removing sensitive information before putting the objects. Periodically flush these batches to S3.
D) Before writing to DynamoDB, do a pre-write acknoledgment to disk on the application server, removing sensitive information before logging. Periodically pipe these files into CloudWatch Logs.

Question

Quizplus · Accepted Answer

Using DynamoDB Streams with AWS Lambda allows for real-time processing of changes and logging to AWS CloudWatch Logs ensures durability and availability of the audit logs, while also allowing for sensitive information to be removed before logging.

You Need to Create an Audit Log of All Changes