Play free

Data World 6 · Pipeline Detective · Stage 6

Who Touched the Data

Who revoked, who deleted, who re-encrypted: the trail and the timeline say; and where audit's own questions should live.

  • CloudTrail
  • CloudTrail Lake
  • AWS Config
  • CloudWatch Logs Insights
  • Partitions and crawls
  • Data lineage
Domain
Data engineering
World
Data World 6: Pipeline Detective (Associate)
Game type
Evidence desk: Each ticket is the reporter's words: find its cause in the evidence.
Time
About 30 minutes on a first attempt (estimated)
Exam guides
  • DEA-C01Skill 3.3.5: Use AWS CloudTrail to track API calls; Skill 3.3.1: Extract logs for audits; Skill 3.3.8: Analyze logs with AWS services (for example, Athena, Amazon EMR, Amazon OpenSearch Service, CloudWatch Logs Insights, big data application logs); Skill 4.4.1: Use AWS CloudTrail to track API calls; Skill 4.4.2: Use Amazon CloudWatch Logs to store application logs; Skill 4.4.3: Use AWS CloudTrail Lake for centralized logging queries; Skill 4.4.4: Analyze logs by using AWS services (for example, Athena, CloudWatch Logs Insights, Amazon OpenSearch Service); Skill 4.4.5: Integrate various AWS services to perform logging (for example, Amazon EMR in cases of large volumes of log data); Skill 4.5.4: Viewing configuration changes that have occurred in an account (for example, AWS Config); Skill 2.4.4: Establish data lineage by using AWS tools (for example, Amazon SageMaker ML Lineage Tracking and Amazon SageMaker Catalog)
  • SCS-C03Skill 2.2.1: Capture and store relevant system and application logs as forensic artifacts; Skill 2.2.2: Search and correlate logs for security events across applications and AWS services