An organization needs to ensure that all data deletion actions across their AWS environment are performed by authorized administrators and that every deletion is audited. Which AWS tool can provide near-real-time alerts specifically for 'Delete' API calls in CloudTrail?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Amazon CloudWatch Logs with 'Metric Filters' on CloudTrail data and CloudWatch Alarms

By creating a metric filter that matches 'Delete' operations in CloudTrail logs, you can trigger an alarm and notify security teams instantly....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon CloudWatch

An organization needs to ensure that all data deletion actions across their AWS environment are performed by authorized administrators and that every deletion is audited. Which AWS tool can provide near-real-time alerts specifically for 'Delete' API calls in CloudTrail?

✓ Correct Answer & ExplanationAmazon CloudWatch

Correct Answer

Amazon CloudWatch Logs with 'Metric Filters' on CloudTrail data and CloudWatch Alarms

Why This Answer Is Correct

By creating a metric filter that matches 'Delete' operations in CloudTrail logs, you can trigger an alarm and notify security teams instantly.

📚 What This Question Tests

This question evaluates your knowledge of Amazon CloudWatch — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon CloudWatch is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.