Security World 5 · Eyes Everywhere · Stage 6

Missing Logs

Five tickets about logs that never arrived. Every cause is ordinary: a permission, an account setting, a bucket policy, a configuration file.

  • Lambda logging permissions
  • API Gateway logging role
  • CloudWatch agent
  • CloudFront logging
  • CloudTrail delivery
Domain
Security
World
Security World 5: Eyes Everywhere (Specialty)
Game type
Evidence desk: Each ticket is the reporter's words: find its cause in the evidence.
Time
About 40 minutes on a first attempt (estimated)
Exam guides
  • SOA-C03Skill 1.1.1: Use AWS services (for example, Amazon CloudWatch, AWS CloudTrail, Amazon Managed Service for Prometheus) to configure monitoring and logging for workloads (for example, serverless, compute, AI); Skill 1.1.2: Configure and manage the CloudWatch agent to collect metrics and logs from EC2 instances, Amazon ECS clusters, or Amazon EKS clusters; Skill 5.3.2: Collect and interpret networking logs to troubleshoot issues
  • SCS-C03Skill 1.3.1: Analyze the functionality, permissions, and configuration of resources (for example, Lambda function logging, Amazon API Gateway logging, health checks, Amazon CloudFront logging); Skill 1.3.2: Remediate misconfiguration of resources (for example, by troubleshooting CloudWatch Agent configurations, troubleshooting missing logs)