Scenario: To secure an Amazon EKS cluster for a PCI-DSS compliant workload, an architect wants to ensure that every administrative action (e.g., creating a pod) is logged and stored. Which tool is essential?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Amazon EKS Control Plane Logging (integrated with CloudWatch)

EKS can be configured to export Audit and API server logs directly to CloudWatch, providing the necessary trail for compliance....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioScenario Based

Scenario: To secure an Amazon EKS cluster for a PCI-DSS compliant workload, an architect wants to ensure that every administrative action (e.g., creating a pod) is logged and stored. Which tool is essential?

✓ Correct Answer & ExplanationScenario Based

Correct Answer

Amazon EKS Control Plane Logging (integrated with CloudWatch)

Why This Answer Is Correct

EKS can be configured to export Audit and API server logs directly to CloudWatch, providing the necessary trail for compliance.

📚 What This Question Tests

This question evaluates your knowledge of Scenario Based — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.